Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: 0q8yTp4Bq+aZWNhPEfibpgTnA884oGSMdoz1kfnIRIg=
Subject key identifier: 88:89:F2:05:EC:E2:C7:7B:60:DC:89:DE:A7:21:55:49:74:A8:BE:D0
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 0197B6A11D989817F2940F9888820579B227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: f7J1SqwqArYh8DrdsAU2TEP40nRVH2yduCCJ4RoygbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1d:98:98:17:f2:94:0f:98:88:82:05:79:b2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=8889f205ece2c77b60dc89dea721554974a8bed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:db:ca:ce:4e:14:b6:58:60:42:27:83:66:
d2:9f:c4:df:fc:ae:7c:cb:c3:4c:c4:98:89:cf:25:
b3:2c:4c:c3:60:0b:c2:9d:8c:5a:d7:3f:be:d9:ba:
0f:bd:9b:35:44:6c:73:45:ff:7b:ab:78:3a:42:fb:
37:76:4a:8b:98:cf:45:ea:5a:02:ef:0b:a8:9c:fa:
d6:61:50:b3:15:97:05:29:4f:84:69:ae:d4:80:6f:
d1:0f:47:f7:32:7b:60:6d:54:cb:72:e2:fb:7f:fb:
aa:d2:f8:8f:65:79:93:10:f7:20:49:3a:ae:ef:50:
65:cb:93:39:52:01:73:50:23:5a:a1:f8:ab:ec:ab:
9b:9c:89:e5:3a:21:16:21:5e:62:9c:a1:1e:88:78:
82:c6:76:d9:50:1b:07:4d:83:a0:de:de:92:b5:49:
f4:04:73:7f:10:59:8d:7c:5f:2b:76:a3:22:92:63:
7f:f3:d5:41:33:90:78:bd:a7:f5:33:3d:8e:ce:96:
76:6d:15:60:73:f3:ae:39:80:32:a2:90:b0:9b:a2:
2e:cf:20:be:c9:f9:87:ca:3c:f9:17:e9:9c:f4:7c:
32:a8:a9:91:2e:96:e8:8a:16:8a:66:4c:a5:f5:0c:
21:80:ff:67:01:1b:3e:ce:a3:f7:5c:0a:c3:90:81:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:89:F2:05:EC:E2:C7:7B:60:DC:89:DE:A7:21:55:49:74:A8:BE:D0
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ce:29:71:d0:4c:8e:7a:22:6e:ef:6a:43:b9:f2:8b:92:25:
28:1c:7e:9f:94:20:25:8e:63:51:2e:4e:c7:ed:79:e9:7b:d1:
5b:b2:40:d4:d5:7b:39:b0:d6:03:06:f1:7c:45:92:1c:f2:dc:
ad:5d:64:54:67:8f:7d:e5:a2:57:7d:d0:52:2b:d3:94:5b:25:
49:09:47:51:86:7b:b1:dd:f0:54:15:17:d8:9d:26:db:92:6e:
13:b9:22:0b:65:64:5c:1a:30:60:5a:83:65:4e:be:1f:2c:61:
62:3f:9a:71:f1:82:f1:29:b1:c4:18:dc:e2:32:11:28:b5:c5:
43:64:88:11:e3:7b:39:4e:15:3e:a9:40:97:8c:eb:c0:86:e4:
4d:46:dc:f0:a6:f8:ac:f8:60:fc:8d:e2:c1:6a:1a:c5:a8:bf:
b8:ca:28:c5:1d:23:6e:f4:e4:1a:31:a9:75:f7:5c:57:4c:bf:
3c:d1:f6:d3:b5:bb:a6:43:6e:00:25:92:0a:b3:e1:fa:fc:e6:
88:c4:5b:6e:44:58:7c:39:a5:b6:fb:3f:27:5b:12:fb:3e:bc:
4f:e1:b7:23:a5:99:77:0e:2f:89:a0:24:ce:0a:86:a5:3a:7f:
5b:eb:94:89:1c:92:73:0c:d4:d3:57:65:a9:48:64:ab:72:62:
ba:4e:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:19 2025 by rpki-client