Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: T0sLWZSmLM2coiDnCI8bsVHA3ePB5P6fB+jgFPSsmvI=
Subject key identifier: 7E:3C:04:9E:25:99:F0:61:5B:25:86:60:79:BC:9F:A1:2D:69:32:70
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 0197B6A049CA2EC9FE652087D82FE55673FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: xUIj/RrWX9sun7ndOtkC6Y4qDsV23kWJqDLXJywCaC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:49:ca:2e:c9:fe:65:20:87:d8:2f:e5:56:73:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=7e3c049e2599f0615b25866079bc9fa12d693270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:9e:ea:65:d4:ea:fb:61:99:fd:70:93:35:
10:62:81:07:90:a9:d4:70:ab:ae:0a:06:08:07:4f:
61:9f:aa:9c:74:70:54:c7:68:35:95:a9:75:0c:1c:
76:1c:56:e4:ea:c6:9e:b0:1d:9b:5f:11:94:fa:d3:
f8:18:f6:44:e4:b4:b4:fd:40:eb:1e:73:ad:a8:45:
ec:50:d7:46:8f:36:70:21:46:a6:10:95:53:71:2d:
3a:e2:d9:f5:f3:20:68:fa:e0:e8:aa:6e:a6:92:fd:
a4:52:3e:b5:70:85:69:e9:27:7d:2d:6f:4e:4d:8a:
59:1f:70:4e:85:e5:a3:c6:db:57:f3:9f:79:37:2e:
dd:70:13:ab:ed:c1:8c:bd:e1:91:8f:35:ac:75:7e:
35:36:80:c5:af:ba:98:ae:6e:d0:81:aa:24:c7:3d:
f5:cb:3a:60:05:52:12:6f:00:ce:0a:f1:7f:7c:45:
48:a3:ce:e7:60:d7:70:73:3e:a9:43:71:10:70:53:
1b:51:e1:f6:c4:83:64:49:08:d9:96:9d:06:54:09:
b0:36:2b:2f:c4:41:b1:96:bb:d2:f6:7b:d6:86:62:
35:09:e4:e5:6b:ae:e1:54:a5:3d:bf:d2:ba:54:e6:
c0:2a:4a:69:9c:b8:ee:e6:4b:b0:89:be:8c:7d:f2:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:04:9E:25:99:F0:61:5B:25:86:60:79:BC:9F:A1:2D:69:32:70
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:89:f5:ea:e8:80:3d:49:b3:91:60:f5:08:da:98:1e:5a:fe:
16:ac:5f:da:21:b4:94:00:a5:05:1e:f6:7b:1e:f4:65:af:93:
39:75:db:b7:9b:b1:39:98:ca:f1:06:87:8a:8b:66:d9:0c:b9:
d4:0a:46:9d:60:80:5e:99:f2:26:9d:2a:20:0f:7f:35:72:fd:
c4:a4:8c:14:eb:fb:f5:82:25:72:51:c4:e6:cd:02:10:37:88:
ec:4c:5f:b7:4d:ae:8f:22:aa:1b:2a:44:1d:48:3e:61:8f:99:
14:36:ff:bd:bb:3a:df:bc:9c:08:44:9f:4e:06:a9:3b:6c:9c:
6b:71:cd:17:bc:28:64:3c:17:73:57:a8:42:96:70:42:39:bf:
7f:e5:be:e5:f8:00:26:8e:e9:08:f3:b2:39:af:f0:19:f0:ee:
20:3a:d2:b5:6b:e6:e0:68:45:c4:6f:23:79:7e:dc:01:4b:20:
7d:e7:78:09:31:06:08:6a:93:d8:bd:bb:7c:55:f3:4c:3e:52:
96:87:83:3c:b6:82:df:17:43:f8:c7:f8:9f:de:96:b9:90:55:
3d:0e:c1:08:49:ca:97:83:47:f8:bc:45:da:21:1c:40:ce:78:
a9:d2:fd:7c:d5:83:42:ce:c7:3d:b8:92:6f:d1:69:dd:5e:6e:
bf:3d:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:56 2025 by rpki-client