Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: 8sN6cZS2wJIQARRXIuSxQDjIUEqIafJelpeA9nLC10Q=
Subject key identifier: 52:FC:08:F4:B8:20:AB:13:68:FA:31:C0:6B:B7:E6:61:49:94:55:33
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 0197B96ADDED721B65A3B483683754F735DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 1027
Signing time: Sun 29 Jun 2025 02:01:17 +0000
Manifest this update: Sun 29 Jun 2025 02:01:17 +0000
Manifest next update: Mon 30 Jun 2025 02:01:17 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: 6jdTChL5RdElKTQ2bgD5m8WhUXq48FHYdx1s0jQ1Ikg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:dd:ed:72:1b:65:a3:b4:83:68:37:54:f7:35:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Jun 29 02:01:17 2025 GMT
Not After : Jun 30 02:01:17 2025 GMT
Subject: CN=52fc08f4b820ab1368fa31c06bb7e66149945533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:41:52:67:c0:a9:d6:ff:e3:74:17:d7:c2:
2d:fb:3b:2e:62:5f:4d:4f:f8:b2:c6:ab:91:45:e4:
1b:7c:63:3e:93:a2:7e:48:80:85:7c:14:ca:a5:a0:
a6:32:25:a9:87:0c:33:2e:25:fe:ec:f8:26:2b:e8:
6d:ec:1e:e3:c5:ab:6d:16:f4:d3:26:36:72:7e:ef:
14:33:57:0a:a0:31:e0:0e:91:84:ed:c3:18:fc:13:
20:62:05:cf:e1:50:75:76:8f:75:4c:86:2b:7c:a2:
1f:28:7e:5e:a9:c3:d0:db:e0:80:b6:b3:c9:b9:90:
56:c8:61:bf:7f:d6:af:ab:b1:8b:ef:7f:2c:4d:1a:
0f:ed:bc:29:50:92:2c:74:92:f9:f1:a5:9f:dc:a8:
61:e7:ae:b8:59:01:a4:96:1a:7a:2c:7b:2a:6d:86:
77:f8:fd:c8:82:4d:7d:b9:48:d4:69:34:52:88:79:
e8:ad:f4:01:09:d2:e7:c0:ac:cb:6c:30:3b:fd:b7:
28:45:8c:3c:3f:95:89:cf:63:9f:a2:21:e5:3c:7a:
1f:5a:ab:03:e5:22:a1:f6:ca:86:f1:f6:8a:50:2b:
c9:f5:b4:3b:4c:da:67:78:d0:8f:20:d5:c8:0a:df:
25:93:6a:ae:a0:06:cf:3b:dc:79:f8:d9:b5:75:bc:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FC:08:F4:B8:20:AB:13:68:FA:31:C0:6B:B7:E6:61:49:94:55:33
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6b:92:98:3f:31:b6:56:19:3d:7b:0e:dc:30:c2:1b:8f:a1:
eb:0f:e5:e6:ff:8f:b0:13:b5:9c:5f:2d:99:3e:2a:67:25:b2:
f9:b8:f9:5f:4a:01:f0:f9:5b:91:89:ba:74:5e:2e:d2:b0:3d:
cc:43:e5:fc:29:43:c4:cd:48:87:f9:fc:95:37:7e:80:ca:f3:
6c:69:83:41:a5:79:ea:03:df:3f:8b:8b:c4:0c:68:9c:f2:48:
74:62:fc:c1:51:34:5b:21:5c:ec:d0:f3:f3:03:20:ad:68:ec:
0c:b4:29:12:b8:66:5d:f1:32:d5:74:ad:42:44:76:94:00:0f:
dd:03:04:09:3c:78:e3:4d:e4:7a:1b:87:91:6d:00:06:80:58:
25:21:79:b2:d1:62:a6:ac:13:a4:d2:b2:db:96:d3:94:ba:9c:
41:29:76:10:19:4a:7c:ef:a0:e5:d0:90:5c:11:6a:41:2e:a5:
46:0b:02:38:f5:2f:4e:32:c0:7d:df:1d:17:19:18:e9:e6:11:
b5:90:fa:06:6e:6a:b5:39:87:e5:2e:6d:ef:cc:1f:8f:88:79:
57:76:e6:ce:fd:be:e9:12:38:bf:33:1b:6b:5b:2e:6d:b7:57:
5e:5d:88:ba:a9:40:05:c6:1c:26:3e:dd:e7:8a:89:cd:9f:14:
81:8e:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:59 2025 by rpki-client