Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
File: clOCbDGl92CXvNwqL2UZiKE2flM.mft (raw, json)
Hash identifier: qtblu3kd95BWfkIxh5sznvVzYhRl8xaDL6ePmW2sRYA=
Subject key identifier: 5A:E2:24:01:4E:FA:95:D1:80:F7:66:15:0B:E8:5B:06:8D:0F:06:40
Authority key identifier: 72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Certificate issuer: /CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Certificate serial: 0197B8FCE5C8951628ADEB684F570122A656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
Manifest number: 088E
Signing time: Sun 29 Jun 2025 00:01:10 +0000
Manifest this update: Sun 29 Jun 2025 00:01:10 +0000
Manifest next update: Mon 30 Jun 2025 00:01:10 +0000
Files and hashes: 1: clOCbDGl92CXvNwqL2UZiKE2flM.crl (hash: 8lxQa8jjuMxFRqrVybljV4lYRU76puxARrhHfrUjElU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e5:c8:95:16:28:ad:eb:68:4f:57:01:22:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Validity
Not Before: Jun 29 00:01:10 2025 GMT
Not After : Jun 30 00:01:10 2025 GMT
Subject: CN=5ae224014efa95d180f766150be85b068d0f0640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:4d:75:59:d6:85:b3:7c:75:f0:77:ab:80:
11:8a:14:5a:f3:6e:57:82:9c:8a:b0:af:95:81:9f:
df:5c:0d:48:41:57:8d:10:50:63:f6:9e:b2:5c:79:
e1:49:a7:65:51:11:43:d1:42:3f:0a:f9:2f:1c:0d:
d1:92:08:c2:51:e0:86:2e:7c:9f:18:ea:e0:42:08:
f6:94:74:24:65:d2:64:f3:6c:2c:7f:66:8c:c6:5b:
9c:e3:0e:aa:0c:a9:b9:aa:e5:2c:a1:22:de:fa:a0:
21:a0:39:4d:20:dc:96:f8:ec:05:3f:d8:f6:6f:9f:
26:1e:1e:e7:be:41:87:c8:65:ef:48:af:86:45:43:
a3:2b:40:78:a5:ba:c2:1f:27:fe:8a:c9:05:3c:71:
10:a1:7f:9b:d3:63:09:c0:d0:c2:3e:ac:be:4b:d3:
b2:b2:04:de:86:a7:93:fe:1f:99:34:13:4e:f1:1f:
8a:39:bd:de:c0:44:fe:85:e0:68:be:e6:3b:68:f1:
67:ee:bb:72:a2:82:07:47:f1:6e:27:50:d3:7c:b6:
ab:50:d7:20:38:95:9a:0b:9e:c2:f0:8b:55:6c:44:
31:02:fd:c5:2a:4a:9b:28:65:51:e5:e8:9b:81:7b:
f6:38:a8:8b:b7:89:e6:4a:d6:3f:25:62:cf:3d:7f:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:24:01:4E:FA:95:D1:80:F7:66:15:0B:E8:5B:06:8D:0F:06:40
X509v3 Authority Key Identifier:
keyid:72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:2c:76:97:30:af:0a:ae:d1:d7:04:a7:3a:92:9b:76:5d:
a9:92:ac:81:57:a6:d6:e0:1b:95:14:ce:df:e4:40:81:e0:cf:
3d:05:18:9f:7c:da:b2:d5:d9:18:1a:fe:04:f7:e2:29:b9:9a:
ce:ae:95:11:bf:81:94:2c:50:51:db:6e:4d:54:82:77:37:7e:
8b:c8:40:b6:57:a4:55:85:e9:91:9b:fc:81:41:0b:84:8a:7c:
9d:45:be:83:c9:21:e9:a6:a6:71:e6:89:14:fa:90:ab:30:b8:
a8:49:7e:58:78:ff:72:88:86:d5:54:fc:74:8d:41:b7:20:38:
82:eb:8c:53:51:20:e5:fb:71:4f:7a:8f:a2:8f:cb:79:41:b0:
6f:e6:a2:5e:27:d8:3a:1e:7e:f1:d7:39:5c:5c:db:7f:d2:fd:
63:db:a0:94:9b:11:8c:60:e1:82:fd:16:1a:11:d9:1c:1b:50:
be:11:1c:4e:90:3c:07:a4:a2:60:e9:c4:7f:86:2a:d8:4e:81:
6b:fa:02:32:32:18:fa:54:67:51:5b:9a:a5:fb:03:6b:d7:24:
14:5d:00:33:0b:60:22:40:74:7b:36:1f:fa:ae:1a:f3:65:fb:
e5:e5:fd:b7:84:38:b3:87:23:c7:87:e7:99:b9:9a:30:a9:55:
80:8b:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:21 2025 by rpki-client