
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier: rmqHK0aWGMiO07fejnHwENgVsMNLUghxTUme927KyS0=
Subject key identifier: B6:8B:59:CB:6B:4A:7D:3D:7E:58:6E:AA:04:28:22:C3:74:01:E4:C7
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial: 0197B7EA57C1AD7D18A1E017E3329B50CB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number: 0DBA
Signing time: Sat 28 Jun 2025 19:01:17 +0000
Manifest this update: Sat 28 Jun 2025 19:01:17 +0000
Manifest next update: Sun 29 Jun 2025 19:01:17 +0000
Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: GQEANM0jQOkYFLNItzCsXx4aaMli+PoVJvqITBSMfNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:57:c1:ad:7d:18:a1:e0:17:e3:32:9b:50:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
Validity
Not Before: Jun 28 19:01:17 2025 GMT
Not After : Jun 29 19:01:17 2025 GMT
Subject: CN=b68b59cb6b4a7d3d7e586eaa042822c37401e4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:63:5c:66:07:21:98:45:83:65:6c:20:56:f7:
6e:3a:76:1b:3f:11:6d:e0:a3:a5:56:dc:c5:f2:11:
3f:2d:d1:21:2d:30:97:0a:5d:6e:f8:37:f1:f3:58:
df:03:b3:92:13:74:56:ad:ca:38:7f:ef:7f:e8:8a:
65:f7:32:3c:44:a6:48:8e:ca:1d:e3:ea:c9:9f:34:
2b:bb:34:fd:99:aa:c4:77:93:fe:bb:3b:7e:f3:77:
2d:37:27:0e:2e:f0:b2:a9:9f:43:cd:e3:f4:c1:34:
b3:67:d9:e2:31:d3:c1:ac:d6:84:a2:83:b8:89:3e:
aa:18:ef:33:36:1a:c0:55:f2:61:e6:2c:48:a7:c5:
1d:92:89:1a:a1:e2:5d:bf:49:e4:96:20:99:31:bf:
d2:99:e0:cd:9b:70:e8:89:36:6c:f9:6a:ff:26:5c:
9a:37:15:9f:f3:fe:49:54:14:47:ed:37:e0:ec:55:
75:93:b5:25:d6:3a:c7:76:8b:74:46:ba:81:e1:96:
49:fb:ca:55:c2:5f:cf:95:db:3b:83:ec:bb:08:03:
4a:b4:7c:5f:ab:2e:b6:18:27:8d:0f:12:f4:12:20:
46:17:b6:ea:81:f0:e0:8e:a6:6d:40:20:b5:8c:13:
61:46:10:9b:c7:30:35:bd:69:7e:bd:1d:7c:f8:0e:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:59:CB:6B:4A:7D:3D:7E:58:6E:AA:04:28:22:C3:74:01:E4:C7
X509v3 Authority Key Identifier:
keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:a9:95:f5:9b:c0:2c:44:04:b0:14:64:a0:35:89:93:77:
ec:b3:92:45:c0:86:2d:be:89:52:08:8d:27:af:f2:93:5f:ea:
43:8d:ac:04:96:f4:31:cd:fa:59:0d:94:b4:48:93:40:2f:c2:
d8:16:0e:da:f3:e5:30:4f:63:37:09:a9:7d:22:90:45:e6:a7:
27:3b:07:fa:4e:93:fa:36:d5:2e:9d:9d:1a:f6:94:e5:94:ea:
75:14:71:ed:43:41:75:ce:38:16:80:7a:f3:a7:d8:3e:a4:2b:
87:a7:f8:09:df:c0:26:a4:28:8a:1a:3c:7c:d5:43:fb:f4:1e:
95:01:bb:47:1d:46:0b:f1:26:3d:61:90:52:3a:19:fe:d2:8f:
08:c4:58:6d:6a:80:c6:8c:c6:3e:fb:3e:de:31:7e:40:ac:fb:
d0:cf:9e:38:cd:9b:a6:b7:d6:cd:53:cb:94:45:0a:9b:2c:2b:
a4:fb:57:25:73:3a:e2:77:b2:b2:58:61:08:60:6c:96:f6:47:
7e:07:08:80:bc:81:2c:17:0e:3b:7f:1f:bc:93:aa:14:b0:dc:
48:e7:62:0f:25:2f:cf:21:78:d1:f9:32:a7:5e:3c:6c:05:09:
05:9a:79:00:a9:8b:5a:8a:c8:77:c9:58:f3:a6:68:b7:af:2c:
5b:a4:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:29 2025 by rpki-client