Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: UFSmbJie9rYx9Fqs0P+d8UQDDoK4/4F3YiFHDOUo1IY=
Subject key identifier: 51:40:D3:3E:0F:C2:90:57:EC:A4:23:44:C8:D8:FE:79:55:8F:8E:8E
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 0197B7EA9572F2C0FCBC56026B4053592ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: LSp9mAoHO1gi8StUpRx//QvEH3WcQRx6KW1uYKcrXaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:95:72:f2:c0:fc:bc:56:02:6b:40:53:59:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=5140d33e0fc29057eca42344c8d8fe79558f8e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:57:05:f8:23:df:11:79:76:8e:90:c2:ba:
56:5c:35:ac:32:c3:63:8e:3b:21:56:f3:a7:a5:cd:
cc:94:a8:e7:f6:b9:0b:28:0f:e2:ca:19:a5:60:c6:
d2:74:d0:5d:7e:f1:00:8f:57:26:bf:99:db:e8:7c:
28:2b:e5:da:ba:fb:70:ff:bd:d1:bd:6c:52:ad:4b:
c4:7b:82:a2:ce:0e:c6:cb:1a:33:2a:ae:d0:d2:be:
c1:18:0c:eb:d0:c8:b4:ed:c8:cc:0c:dd:50:da:4d:
f6:6f:c3:93:27:84:d9:38:a9:fd:a5:89:af:10:e7:
0e:d5:b6:cd:3a:7e:76:cd:4b:74:6d:93:c2:05:b6:
89:a8:51:70:06:7a:11:0e:0a:26:97:a1:ab:dd:cf:
f0:8d:0c:bd:e2:e2:36:48:19:51:29:ff:7f:e5:32:
5e:ac:9f:c4:43:55:23:b6:8a:2b:b0:f8:83:d5:5e:
36:f6:fa:b0:fe:fe:fa:61:59:73:06:55:d8:c7:a9:
f3:ec:9b:d6:2f:01:f1:d9:84:ed:a0:d7:25:15:2b:
a5:cc:17:8c:98:d1:2f:7c:fe:8b:d0:e6:eb:52:ab:
8b:f4:89:9a:72:fe:7d:54:78:fe:3c:d8:4b:e0:10:
6d:e2:85:b7:82:17:5f:c7:9f:d8:70:49:3f:a9:1a:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:D3:3E:0F:C2:90:57:EC:A4:23:44:C8:D8:FE:79:55:8F:8E:8E
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:0a:6a:17:5e:d2:c1:e6:13:ce:50:07:2b:0b:00:47:80:
f9:0e:64:2b:62:72:39:83:ad:44:f8:c5:84:ee:a1:f0:bc:38:
2d:49:32:64:0e:b8:da:f7:d9:19:5e:13:d3:bc:1f:9e:a0:92:
71:af:f1:d5:a5:e5:fb:95:9f:d4:3c:71:47:de:e1:d4:05:10:
21:4a:a3:b8:36:de:74:38:07:63:4b:ce:dd:42:16:a9:9c:65:
0a:3c:b3:54:12:ce:77:b5:b2:0e:fc:08:c4:e6:0c:cf:71:e7:
65:c4:b8:f1:ad:b8:39:91:27:c3:c2:83:e6:23:4e:56:8d:ce:
ec:db:68:e1:25:b5:85:1f:b8:c6:38:44:2d:54:f8:d4:25:f9:
a8:51:2b:5a:ab:19:83:86:64:11:1d:7e:8f:35:0f:f5:60:1e:
11:59:4b:5b:a9:fb:6d:fe:a8:ee:04:e5:26:5c:51:6c:af:c8:
78:2e:71:a9:bd:18:8f:1e:05:b9:b2:17:18:82:d1:c0:10:be:
cd:d0:ec:53:75:2f:b7:49:77:4c:5e:7a:e4:b6:61:a3:3d:21:
70:94:68:18:45:2b:44:54:73:1c:97:08:1c:ff:99:bb:7f:8d:
b9:aa:5f:7d:dd:00:73:19:76:0e:8d:21:3f:3e:a9:fa:8d:86:
23:92:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:00:24 2025 by rpki-client