Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: qjY1tkyWb6EdDbCgnKcT0UJcIu+GQaI8nK9+rKO9BfU=
Subject key identifier: E3:71:9F:1A:98:1B:99:F3:07:4B:80:65:17:FF:18:5C:7E:2E:78:76
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 0197B77C29FAC85FF63D140B45B42109E995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 1273
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: DxcaQag6wWdeq40fYdri8bcKerfqjlJzYPR/4RfeAuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:29:fa:c8:5f:f6:3d:14:0b:45:b4:21:09:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=e3719f1a981b99f3074b806517ff185c7e2e7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:53:26:6b:68:92:d2:40:9c:b1:36:ea:99:
2e:ee:02:13:3e:15:4d:8a:da:bc:a6:4b:f1:9d:23:
94:9d:d8:cc:13:5e:85:2c:e3:f1:47:44:ca:8a:71:
02:53:67:c9:40:e3:43:d9:7c:aa:00:54:86:1d:f8:
27:2e:31:7b:8e:dc:64:99:01:98:ee:03:54:f6:85:
2d:b6:a3:01:92:4d:16:39:54:90:f1:11:dc:89:3d:
45:fe:13:60:ba:85:0e:4e:25:8e:5b:4e:eb:e6:a4:
cb:c3:81:67:6a:89:8c:1a:b9:d2:6a:ed:2a:77:63:
25:92:68:54:0c:34:df:ba:7f:b3:6e:f1:db:a8:9b:
1c:d5:c4:30:8c:ee:55:76:ad:55:a0:05:d4:94:0c:
8f:46:8b:ae:7e:89:43:cb:64:c9:22:ec:bf:2c:46:
55:c4:d7:41:3d:60:d2:fc:91:e6:b8:de:ec:48:3f:
27:1f:b0:c5:cd:94:1e:c9:db:e1:be:ef:fb:c5:47:
d5:61:f1:7c:63:f0:de:f6:7b:db:d1:6f:f2:7f:ea:
24:43:08:28:52:fc:17:6d:af:e1:09:23:b2:fd:be:
eb:d6:46:31:8c:d5:79:9c:8a:09:50:eb:bc:ef:9a:
60:54:85:f4:5c:89:8d:19:98:ef:25:dd:5c:4e:d8:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:9F:1A:98:1B:99:F3:07:4B:80:65:17:FF:18:5C:7E:2E:78:76
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0f:4b:33:96:d7:b6:86:2a:80:d0:2f:0d:a1:71:08:cd:f5:
0a:7a:d3:fe:e7:6f:0a:6d:9e:a1:06:de:0f:81:b2:2f:71:cd:
af:2e:a9:39:ca:4d:ef:31:f5:30:c6:c4:76:39:95:d3:d7:8b:
4f:d6:c0:77:eb:d4:48:68:0b:5c:63:15:a1:03:51:68:5d:05:
52:e9:ef:be:fe:d1:2d:a2:08:ef:66:ce:2b:44:b5:08:39:63:
34:de:08:83:2f:5e:eb:f7:58:4e:13:6f:ce:b5:f5:bd:38:6b:
c5:0d:3f:a6:61:c1:1c:63:48:45:4a:2d:ec:a4:8e:07:31:3c:
41:68:61:db:6f:53:59:28:6e:f7:f6:8e:26:5e:0e:10:bb:0b:
ba:85:63:f6:a4:fc:db:90:8d:d8:56:59:d3:1b:e0:79:f6:e8:
06:98:27:c1:32:17:64:0d:25:6d:bc:3e:27:7b:83:6d:8e:75:
f1:b9:30:20:6c:6a:79:48:6c:b6:aa:e1:ae:c5:f5:f8:b8:67:
e4:05:1f:d5:b6:c9:17:e9:54:ba:29:d9:a6:1f:1b:af:8f:f3:
42:28:9b:2b:42:57:52:8c:cb:78:64:f3:a6:6f:6e:94:76:e9:
c2:a1:36:db:26:96:dc:af:d2:b4:77:cb:13:45:cb:01:fb:8d:
43:fb:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:37 2025 by rpki-client