Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier: Fcq64D9o3vXB/nVPo1A7gtZnBuu7rm8afbvi1Qs1SQA=
Subject key identifier: 7A:2C:F9:62:01:45:96:0D:F7:11:0A:5B:D5:FA:8F:89:24:62:B9:10
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial: 0197B88FB3C9AB7E87C99F773120C061BC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:54 +0000
Manifest this update: Sat 28 Jun 2025 22:01:54 +0000
Manifest next update: Sun 29 Jun 2025 22:01:54 +0000
Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: NJfqVRdX2cOKdwmqAXo3u3gKfFE7PgHXHPkjkF3Oz6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b3:c9:ab:7e:87:c9:9f:77:31:20:c0:61:bc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Validity
Not Before: Jun 28 22:01:54 2025 GMT
Not After : Jun 29 22:01:54 2025 GMT
Subject: CN=7a2cf9620145960df7110a5bd5fa8f892462b910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:e9:f7:92:4e:10:61:de:0b:96:26:e0:4e:
e0:22:18:ee:e3:f0:f2:f0:f1:6e:1a:69:11:99:7f:
44:4f:4c:92:1f:63:4a:f1:cf:64:77:d8:2b:cf:a8:
ae:ec:65:75:9c:83:db:32:79:1c:32:b6:c3:e9:58:
9b:44:68:43:e8:9d:12:ef:8a:35:df:b9:20:d8:38:
47:d7:6a:90:6b:81:8d:c9:91:1d:40:76:cc:f0:30:
b3:55:a3:c1:47:5a:a1:01:0f:0a:34:23:85:3f:bc:
23:76:25:ea:7f:9c:45:2c:96:05:bf:0f:4b:e6:b8:
de:f8:b6:a6:ff:8b:77:bb:ff:1a:ff:86:42:31:e9:
bb:fe:59:23:33:9b:7b:6a:b2:3d:99:8d:9a:71:47:
b4:39:58:90:5e:6e:be:53:67:71:dd:58:da:df:e0:
88:56:f7:6a:3c:e1:25:01:e5:c3:8d:01:89:d3:c3:
7c:80:fb:4c:28:d8:00:d9:47:4c:33:2f:2f:b3:9f:
68:38:c8:bf:60:2e:0c:74:b1:ed:41:2f:61:70:78:
e3:7b:be:8a:da:f1:2c:33:9b:00:ef:ea:b9:97:50:
f2:81:2d:03:38:84:54:6f:ac:01:0d:39:24:da:bf:
38:3b:c1:19:14:b3:19:a2:e6:68:09:2e:18:4f:0e:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:F9:62:01:45:96:0D:F7:11:0A:5B:D5:FA:8F:89:24:62:B9:10
X509v3 Authority Key Identifier:
keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:4c:b4:f5:06:aa:c9:7b:d9:e9:7b:6c:58:ce:f5:26:8c:
c8:95:29:48:0a:f9:82:48:b4:95:bc:6f:05:b0:7e:63:12:7b:
5e:43:37:ae:db:30:a9:4b:7b:71:5b:b6:e9:d3:f3:86:60:78:
43:2f:bc:7e:cd:2b:4e:f3:78:1b:19:cf:ed:86:db:2c:23:0a:
39:8b:b7:1f:04:ce:1a:ce:1a:7b:4f:f0:a0:e1:b1:f1:51:9a:
61:e8:03:29:51:10:53:6c:00:7c:65:dd:00:25:bc:2d:71:c7:
ec:4b:e8:c9:13:62:6b:25:bc:6b:18:05:5d:15:9f:78:32:1f:
65:8b:6d:83:09:9d:13:d7:bf:ad:20:62:55:7b:e1:57:b2:06:
e7:82:da:44:ec:5a:34:b0:ea:62:7b:12:24:4b:5b:e4:ea:42:
fc:6d:80:2f:af:7a:f6:ec:01:6f:ba:0c:59:88:90:7b:f2:79:
32:64:21:62:83:dc:da:a0:07:2e:ea:64:c2:3a:ce:43:53:b9:
4a:80:81:9c:8d:b1:58:d3:10:99:b8:d7:b6:48:ac:6c:78:2c:
59:04:c2:72:da:b0:1e:3d:30:a0:f5:ad:45:5e:4b:ea:98:ec:
17:8c:ce:0b:aa:14:4c:6a:0c:d7:18:4e:29:d5:1e:de:19:14:
5c:36:81:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:33 2025 by rpki-client