Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: TE6/lzelaGY/ZRrX83pi3alV2stgwi7XT5iKinKrdEA=
Subject key identifier: DB:62:8F:7B:C0:01:75:9B:80:E1:64:70:B2:DB:B6:A9:8C:73:6B:47
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 0197B8902534E4D5CC5F6E5B7481088B8D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:02:23 +0000
Manifest this update: Sat 28 Jun 2025 22:02:23 +0000
Manifest next update: Sun 29 Jun 2025 22:02:23 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: YTbFGQeLiTMk1IPLzNq/y2Z4Oz/dTqyVsa18XmUDZ/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:25:34:e4:d5:cc:5f:6e:5b:74:81:08:8b:8d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Jun 28 22:02:23 2025 GMT
Not After : Jun 29 22:02:23 2025 GMT
Subject: CN=db628f7bc001759b80e16470b2dbb6a98c736b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:c2:50:01:f8:36:ce:6a:fb:81:ae:46:fe:
ac:69:f4:68:66:30:86:04:b3:f5:28:94:da:65:bc:
3c:42:a1:1f:1d:7c:74:63:82:04:7d:1c:a0:4f:21:
6b:77:7f:29:64:ac:86:50:e4:4a:d9:53:0a:2c:39:
f2:b1:91:f8:5e:c6:28:df:2b:96:86:c5:a3:55:f6:
22:1d:c3:b4:93:d6:a4:59:81:a7:0d:12:3c:9c:bc:
9f:05:8f:76:66:8d:42:7f:2b:9d:d5:88:a7:9b:e5:
74:fe:01:3b:35:13:a3:f2:3f:84:37:6d:7d:8b:c2:
df:12:f6:42:2a:f6:d9:eb:f0:e2:5e:24:ed:45:67:
fe:8c:b8:cf:3f:a8:c8:11:c9:f6:94:fc:77:bd:f3:
6b:c0:9b:e0:31:68:b5:83:d5:f3:05:17:db:78:68:
18:7f:a3:ae:8b:e9:ee:6d:db:68:cd:b8:98:62:65:
89:ab:d9:51:0b:a9:cf:80:51:db:b0:22:c0:9a:31:
06:c1:10:d2:a9:9b:5c:29:eb:b7:93:85:94:bc:68:
5f:30:c6:48:42:7d:c6:c9:e8:f1:49:c2:44:77:58:
a4:d5:9f:cd:f2:49:3d:10:eb:0c:84:83:90:9e:44:
f3:46:2a:01:b2:80:59:87:6e:a4:c0:82:b4:02:90:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:62:8F:7B:C0:01:75:9B:80:E1:64:70:B2:DB:B6:A9:8C:73:6B:47
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d3:a9:29:46:6c:70:48:82:25:55:01:d7:f5:24:1f:b4:48:
45:b2:55:60:ce:77:04:a1:93:a7:ac:f5:23:e2:6c:bd:3f:51:
de:77:9b:9c:36:1b:55:8e:94:cf:e2:1a:9c:3a:bc:d3:c0:2a:
c3:75:15:4d:e0:9e:02:b3:fc:d9:21:b0:f6:c1:45:89:98:ca:
15:f3:80:5e:b1:c5:27:c8:2c:79:e1:05:7b:0e:3c:14:21:ef:
a3:b3:89:4b:80:7d:58:57:3b:f1:75:22:42:7e:8a:50:57:19:
f6:5f:28:92:3e:34:99:fb:74:dd:d1:a1:39:3b:19:e7:e0:17:
64:18:39:fe:46:62:b3:bc:e6:df:c4:86:16:41:88:d9:14:6b:
df:a6:9e:b2:77:bb:0f:3c:65:89:7d:0e:f7:92:b4:22:d3:9b:
c2:b8:8e:f9:3a:95:44:8b:ff:e5:1f:a3:76:cb:5a:48:c8:f8:
37:1d:a0:97:c1:68:d4:26:35:46:fd:70:7b:5f:ba:03:e1:20:
4b:97:27:9c:cf:fc:98:5e:d2:32:6c:cb:c5:91:79:7b:5b:ac:
7e:b5:85:c3:8f:66:d6:e6:1e:57:72:71:4b:34:28:d0:bc:6b:
d1:55:59:71:1d:66:cb:e8:4a:f2:9b:5c:30:aa:42:9e:59:81:
5a:bb:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:30 2025 by rpki-client