Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier: 1T0h6/F53+zoz2af0txGyiW0OwgLD0j1i/I0ZY6w3K4=
Subject key identifier: C2:F5:53:67:2E:2E:C0:A1:47:34:D7:D6:64:E8:CE:70:C4:E8:69:1A
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial: 0197B77C2EA885303B21F890361E2121E335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: jU/vSGccTbo9P206t5Xms+H8tC/R9cs+urcdXb3wtYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2e:a8:85:30:3b:21:f8:90:36:1e:21:21:e3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=c2f553672e2ec0a14734d7d664e8ce70c4e8691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:2f:05:61:d9:15:c5:f2:8c:4d:fa:18:73:
3e:dd:6c:40:b4:8e:ef:bb:a3:bd:0e:a1:79:f9:80:
3a:67:fa:45:0f:af:1f:e0:f1:c0:0e:da:52:49:26:
80:b0:bd:32:e4:8f:1e:8e:21:06:9e:18:f8:24:8b:
63:0a:ee:1b:d3:30:17:e1:ae:b6:13:28:80:2a:26:
28:37:1a:67:d9:2c:0e:a6:14:17:44:be:90:0a:7e:
34:76:17:e6:b3:e1:53:97:ea:ac:60:6e:74:b2:c9:
69:14:aa:5e:c9:4d:5c:89:94:72:14:4c:83:ae:1e:
d8:07:23:98:fb:7a:42:42:fc:e2:e4:5f:f2:e6:57:
c3:ac:6b:6c:fa:01:37:72:97:77:6a:c4:a1:7e:5b:
4b:d0:67:ae:b1:9d:c6:a2:b1:c3:68:41:1a:d5:d1:
ba:8e:77:6d:95:83:03:92:ca:7f:a8:a6:4f:6a:50:
04:ff:24:8e:e2:12:5a:c8:5a:7e:4e:5b:e3:fd:bf:
76:d2:b4:c6:89:5b:d2:6b:21:48:21:df:0f:34:5b:
24:38:bf:7e:28:ce:bd:55:5e:af:11:b1:e8:23:07:
f4:fb:d9:1b:77:82:c3:b9:f1:d6:ea:09:32:26:2e:
7b:10:63:bb:f5:38:c3:db:c7:49:df:22:cf:7a:3c:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:53:67:2E:2E:C0:A1:47:34:D7:D6:64:E8:CE:70:C4:E8:69:1A
X509v3 Authority Key Identifier:
keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:cc:aa:25:79:2e:f2:81:3a:b2:9b:42:8e:4a:d2:96:f4:
5e:f8:a7:fb:ee:ea:1d:76:df:b0:4f:01:7e:63:4f:84:7e:eb:
26:1c:03:cc:ad:0e:6f:71:5c:44:65:b6:0a:52:29:c8:94:a0:
8c:41:0a:8c:d6:d4:21:47:af:b6:1b:87:cf:ae:b4:83:9a:6e:
87:07:64:09:65:45:38:3e:73:8d:af:53:5f:de:a6:91:a7:92:
e4:65:c8:fc:01:cc:1c:17:c0:0f:18:cc:cf:87:fa:fe:cc:5d:
73:84:1a:a1:2d:70:fb:78:d8:d3:1c:22:4a:3e:c8:32:ae:7b:
35:41:2d:92:4a:0d:e3:b1:b7:ef:e8:79:65:29:2e:3f:6e:49:
5e:af:d3:96:15:65:bc:3c:18:2d:47:a3:4d:1f:44:90:07:a5:
d6:fd:29:84:bf:84:65:69:c4:e7:bf:8b:b5:83:f8:a4:a6:95:
a3:f1:61:c3:d1:8c:0e:50:63:e1:61:b0:a0:a2:35:b6:a2:c5:
10:81:ff:d0:ab:2b:85:68:9b:f8:85:cd:d9:48:40:a4:3e:d3:
37:b7:7d:ee:10:ee:c1:97:e1:25:3f:e6:ae:0c:57:21:22:63:
52:f0:c1:89:c5:43:55:c4:7a:c7:dd:8e:93:bc:bb:c9:fb:5b:
4a:23:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:27 2025 by rpki-client