Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
File: j7phV8tS0RaPUIRsXlB5IkDt8-A.mft (raw, json)
Hash identifier: abGXr279xWavkW9sj2s/cab4o5yFO0OYB298LDshm1w=
Subject key identifier: 5A:03:56:96:92:B3:37:0F:DA:64:63:68:5E:1F:9B:93:EF:A5:70:88
Authority key identifier: 8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
Certificate issuer: /CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Certificate serial: 0197CE3B2E9AC7CC31CF2B395EF90D12020D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
Manifest number: 08F1
Signing time: Thu 03 Jul 2025 03:01:14 +0000
Manifest this update: Thu 03 Jul 2025 03:01:14 +0000
Manifest next update: Fri 04 Jul 2025 03:01:14 +0000
Files and hashes: 1: j7phV8tS0RaPUIRsXlB5IkDt8-A.crl (hash: TF73DT+HGmC+DubttN4TrGDsJuVBTPDNMvRTIiOUqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:2e:9a:c7:cc:31:cf:2b:39:5e:f9:0d:12:02:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Validity
Not Before: Jul 3 03:01:14 2025 GMT
Not After : Jul 4 03:01:14 2025 GMT
Subject: CN=5a03569692b3370fda6463685e1f9b93efa57088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:ad:f0:e4:4f:e5:4f:7d:c6:0d:da:bf:a8:
73:69:98:c9:8b:ee:71:88:74:c6:64:14:0c:69:5b:
ca:47:e2:d3:3d:23:27:1d:f5:de:be:9e:69:f7:f4:
a1:e7:18:f6:ac:c2:a0:4f:20:ec:23:31:da:f4:0b:
ce:68:77:7f:9b:bb:f5:1a:75:f7:49:53:49:1d:cc:
96:ac:74:41:14:f2:ad:9e:3a:6b:3d:80:9a:47:bc:
74:47:d3:04:97:7b:95:c5:d8:6e:f3:a4:4d:98:38:
2d:a2:f5:55:85:a2:97:e7:01:7b:c3:92:14:37:15:
5e:8f:ce:99:6f:80:28:fe:e3:83:96:6b:45:bc:1c:
09:31:1e:b1:7d:7e:69:26:94:5b:77:9e:e9:24:08:
28:f8:97:63:69:ab:01:09:48:4b:81:24:af:0e:6e:
16:b1:71:af:fa:38:2b:4f:f4:2f:26:5d:f9:a8:b4:
69:c1:00:04:09:6d:c1:14:3d:18:f9:ba:93:3a:3c:
9b:70:6c:20:ec:92:e1:57:17:d9:2a:7c:c4:57:43:
c0:09:d8:f3:b4:b9:f7:00:cb:d7:c5:ba:48:fe:62:
92:27:dd:fb:b8:29:a1:b7:e6:e1:cf:65:42:fe:21:
d4:ec:fd:85:9e:8a:0a:91:3e:c0:d5:42:9a:97:85:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:56:96:92:B3:37:0F:DA:64:63:68:5E:1F:9B:93:EF:A5:70:88
X509v3 Authority Key Identifier:
keyid:8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:af:78:1f:ac:f8:95:1f:5a:d6:c8:c2:cc:4b:30:1b:0e:ce:
cd:e2:d1:27:80:47:2d:52:80:77:98:f4:4b:43:ca:1a:18:e8:
74:7b:e2:1b:ec:ff:16:74:ec:af:2b:8d:81:0d:d0:d3:b1:ff:
3b:0d:5d:dd:68:7b:d2:0d:ba:25:b6:dc:9a:75:ef:ac:8a:1b:
10:01:00:6a:3a:a8:6a:48:0f:22:2a:7a:c2:0b:93:b9:40:24:
bc:a8:71:0e:f4:4a:e5:cf:77:e2:0b:b2:d1:95:17:2d:b2:89:
f0:8a:ba:9d:1c:eb:37:ed:74:6a:82:e3:57:17:91:af:a6:b8:
69:32:9e:60:26:0d:c9:53:11:af:b2:dc:0b:5f:a2:3e:09:21:
c5:4c:96:dc:4c:91:75:ca:4f:17:78:c5:55:90:ba:75:39:7a:
87:30:04:6f:62:be:8b:5c:01:ba:58:8c:e1:b4:04:58:58:e1:
ea:79:f1:c8:a2:b8:db:54:f2:2b:50:bb:20:36:4e:8e:b0:43:
2c:a9:0d:2a:14:40:1d:46:c7:a8:60:8c:b5:3a:b8:b8:70:9c:
05:44:6e:af:8b:fe:79:ca:dc:c5:9a:f4:09:34:19:5c:26:3b:
17:83:8e:9e:ad:6e:81:3b:d9:82:d2:86:d0:88:75:05:5e:f6:
82:ab:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:38:03 2025 by rpki-client