Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: DYFWZx3xVR/NgcFDEFf6XnMwQJal5Wkab3F+SlY0YyE=
Subject key identifier: 94:BA:34:1B:0F:DB:56:05:E2:25:6E:6A:FF:F0:D5:6B:6B:39:6B:54
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 0197B70EB348F82585A3CFC47F467AFEAF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 033F
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: LdGdf0VFn0kOv5tn51uBy6CtJ3MulH7ZvP1zy2rGiEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b3:48:f8:25:85:a3:cf:c4:7f:46:7a:fe:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=94ba341b0fdb5605e2256e6afff0d56b6b396b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:5e:04:c0:25:6b:83:a7:91:b5:a4:3a:31:
4a:f9:a0:bc:5e:70:c5:e0:5e:fa:78:b4:db:91:ed:
82:51:1b:2e:ae:12:ff:e8:33:15:a8:f5:9b:5b:29:
72:94:42:85:c8:81:e4:61:e2:12:f6:d2:79:47:77:
0e:ab:31:94:5c:41:ef:37:a7:8d:94:e1:89:60:c9:
92:2e:64:af:0d:78:9f:7b:5f:77:b4:e5:9e:ec:e0:
ee:f0:7b:49:7a:e5:fe:cc:d4:74:91:7d:34:36:9c:
97:37:00:2a:be:99:dd:59:0e:05:92:51:64:f3:95:
ec:e6:0f:51:b3:7c:23:a5:e6:5b:70:fc:4e:70:ed:
87:46:d0:1b:22:ed:7a:50:71:64:1a:97:6b:76:97:
1d:c0:9d:43:54:f3:cf:c8:84:40:af:22:f4:e0:c3:
9d:92:78:55:f5:62:6f:33:09:b5:39:b4:e7:1d:f5:
79:87:a7:ea:bc:c8:4a:92:34:9d:98:42:c6:44:55:
1c:c1:d8:63:d4:ca:e3:48:76:77:e7:a0:6b:cf:a1:
2f:d0:4a:bd:28:10:7a:66:3b:72:37:fe:f4:30:d0:
9a:15:7d:02:c1:80:cf:2d:31:b4:29:36:7d:28:f7:
2e:25:f3:60:2d:42:30:ec:4b:97:35:5d:db:4a:31:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:34:1B:0F:DB:56:05:E2:25:6E:6A:FF:F0:D5:6B:6B:39:6B:54
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:cc:34:aa:de:0a:6b:6f:65:dc:dc:18:de:5d:8a:aa:a3:
94:54:7b:64:b6:f2:d4:6b:25:b5:b8:14:0a:e2:61:b5:77:05:
13:51:33:66:03:2f:57:56:7f:6c:e2:90:d5:2d:c1:ef:f7:51:
74:79:05:25:47:74:f8:41:54:4c:2f:4c:24:23:07:31:d0:f0:
52:f6:ed:12:55:c3:73:d2:5c:90:c2:b5:3c:8c:b4:da:01:d6:
71:0e:3c:85:3d:3b:e0:7a:c9:cb:16:74:6e:08:ad:1c:1a:75:
86:d3:7f:cd:f3:c4:5b:0b:54:80:f3:fb:c4:c7:bb:d5:a1:82:
9e:db:e1:87:19:f0:31:b8:24:1c:93:05:bf:f4:2e:12:05:2b:
8d:c6:29:b0:cd:3a:cf:0a:18:61:d7:05:08:90:55:52:d3:f1:
79:5b:1c:1e:42:96:aa:18:9f:12:a5:66:90:81:f1:67:65:99:
d9:bb:80:73:2d:f3:a2:d6:ea:85:98:22:e4:ab:1c:bd:f8:4d:
31:9a:d7:5f:05:3f:9b:af:69:95:02:e7:f9:84:e9:12:a6:82:
56:1d:59:1c:8c:b1:6d:3a:60:c4:f4:a1:74:2c:d7:19:df:c2:
f7:75:ae:aa:26:26:94:02:c0:d6:9e:b4:bd:f2:f6:66:4f:c2:
74:36:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:36 2025 by rpki-client