Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: gleJdWZCnivoOwUU09WcpMR+wwYlKXxYXTR7NB1ceXs=
Subject key identifier: 08:E7:2B:28:AF:08:A1:13:C8:2F:D4:0F:97:AD:D1:19:9C:EF:7A:19
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 0197B6A0B63E6FD104244346A851C224E29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: fCTD7JGKwayvoev2qmjxsyQDsViI3VzUOZQcxt8uaSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b6:3e:6f:d1:04:24:43:46:a8:51:c2:24:e2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=08e72b28af08a113c82fd40f97add1199cef7a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:98:bf:4e:b5:a2:b9:07:03:95:ec:ea:df:
77:82:09:d4:83:ac:6e:e9:a4:6f:07:19:c2:11:45:
02:dc:c5:3f:55:ba:28:b5:21:9b:9b:7b:c8:d3:64:
69:93:ae:93:e0:54:0b:e0:81:34:14:6a:bc:7a:a7:
7c:95:17:43:af:f8:7a:db:d8:02:ec:d1:95:69:47:
27:ab:21:27:cf:67:99:5e:7d:1f:50:5b:05:7f:8a:
f3:10:ac:0f:13:9a:e3:d0:77:e4:38:03:24:7b:d3:
df:35:97:9a:78:37:47:ea:46:c4:45:2e:28:5a:f4:
ca:24:cf:a8:87:26:92:4e:7b:be:7c:3e:24:3e:65:
75:5e:1f:23:1f:90:59:70:d7:ba:9d:19:97:d3:fc:
ee:92:02:ae:28:56:85:c9:c8:f0:ff:8f:fa:44:65:
e7:c3:54:8d:12:5a:2b:f0:1e:89:5c:73:31:01:5c:
2c:7b:bb:73:d2:0c:03:e5:c2:76:c1:78:a9:88:84:
61:d0:9d:c2:c3:8a:8f:24:71:c0:e7:34:92:8c:4f:
84:b0:1a:b2:0a:01:d4:a7:ef:c6:f9:9f:3f:1d:63:
13:54:c4:04:f9:cc:fc:65:17:e5:72:52:3f:91:ae:
eb:10:2b:da:50:6a:6a:cb:2c:7f:77:a2:bd:fe:62:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:2B:28:AF:08:A1:13:C8:2F:D4:0F:97:AD:D1:19:9C:EF:7A:19
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ae:4c:f1:83:5c:a6:36:ed:8e:f5:8e:7e:f9:c4:02:44:6e:
96:5c:99:d1:29:ba:ef:d8:94:f1:a3:1f:85:c6:b3:85:75:1d:
cc:8f:06:f2:63:39:3d:fc:2b:53:71:ce:db:56:48:f0:75:aa:
a2:02:9b:54:68:0e:5e:fd:50:89:f9:d9:1c:a5:28:55:d6:68:
18:d3:b8:dc:c8:3e:10:ff:d1:fd:92:0c:ce:99:68:51:86:c7:
5d:cc:c4:ba:12:97:eb:9e:75:19:68:36:1a:b1:80:39:15:3a:
43:7c:e3:54:ae:dc:cb:52:4e:98:52:ba:85:5e:8f:06:0f:c4:
16:ee:41:11:63:46:19:dc:50:a0:07:cf:58:e1:cd:a0:f9:44:
4d:6a:67:01:21:df:90:b5:ff:08:cd:61:9e:06:ba:65:04:fd:
51:21:50:54:fe:1c:58:65:c2:36:cf:39:99:01:a4:a3:e5:0e:
25:4e:a4:e7:57:04:71:d0:81:1c:cd:4c:c2:9c:b6:b8:ee:2d:
c0:e3:e0:a0:47:33:54:e7:ad:7f:9d:94:83:cf:df:30:10:02:
81:64:66:c7:0b:bd:5e:b7:42:6e:9f:ec:95:5f:41:d5:4a:34:
31:80:92:0e:2e:99:d7:54:e5:a0:be:d1:24:ae:1f:d4:21:80:
d6:b7:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:57 2025 by rpki-client