Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
File: t38R7tTnnIXMxWLfPR8oPjOdou0.mft (raw, json)
Hash identifier: fRrnYc9AozXpbmvZLmazCIE4Vc6a8/3nlRZ3kKma7JY=
Subject key identifier: 16:36:E2:9A:FA:D5:38:EF:0C:3D:C8:6C:D8:52:E9:2F:8F:1B:D2:86
Authority key identifier: B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED
Certificate issuer: /CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
Certificate serial: 0197C23894DD07F56E66B4E20803F4DD2E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
Manifest number: 0C5D
Signing time: Mon 30 Jun 2025 19:02:57 +0000
Manifest this update: Mon 30 Jun 2025 19:02:57 +0000
Manifest next update: Tue 01 Jul 2025 19:02:57 +0000
Files and hashes: 1: t38R7tTnnIXMxWLfPR8oPjOdou0.crl (hash: eEnhWpzgH1WzUYZ44IWVEUJRnmYqt9XheSseQE1cNt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:38:94:dd:07:f5:6e:66:b4:e2:08:03:f4:dd:2e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
Validity
Not Before: Jun 30 19:02:57 2025 GMT
Not After : Jul 1 19:02:57 2025 GMT
Subject: CN=1636e29afad538ef0c3dc86cd852e92f8f1bd286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:55:ad:e7:2a:3d:f8:99:33:da:5f:f7:6b:
8d:31:a0:71:bc:f8:f0:74:af:04:2d:ee:2e:86:72:
64:1c:46:0b:fb:b4:9e:43:43:da:37:94:30:39:70:
49:ec:9a:3c:5c:35:5c:2a:f7:ff:30:b2:11:a6:52:
34:49:a0:b1:17:cf:d4:fb:61:62:ab:b5:33:b7:42:
10:a8:47:e6:8d:da:d1:d1:f5:56:7a:0f:84:fc:ad:
87:7f:63:1d:fd:9f:e5:cb:5b:f9:bd:22:c1:41:3d:
0e:42:cc:d7:a3:19:f4:70:c1:4f:a1:9e:05:d3:a8:
b6:32:7c:4c:cb:6f:16:16:ba:d9:f0:3b:9c:61:07:
09:ad:10:b1:c3:c2:87:0e:91:4e:da:f9:2e:20:86:
ab:d5:66:a9:9f:57:6f:2f:54:dc:14:ee:56:65:9b:
78:ea:78:53:0e:9a:65:9a:bf:2a:a8:f0:be:4c:65:
94:f0:fc:3f:66:73:28:ac:59:ba:4a:67:af:72:50:
da:06:d6:a5:33:15:08:06:10:82:48:61:a3:31:36:
90:86:cc:a0:c6:b1:7d:2e:75:5d:a0:f0:5e:7b:b3:
e8:9e:4a:cf:0e:42:b0:3b:7e:71:f0:32:3c:9d:e8:
b3:63:2b:9a:51:eb:67:03:ed:f9:a1:69:3a:c5:93:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:E2:9A:FA:D5:38:EF:0C:3D:C8:6C:D8:52:E9:2F:8F:1B:D2:86
X509v3 Authority Key Identifier:
keyid:B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:f7:f6:74:79:60:9a:b0:e8:0a:f6:c0:df:d9:9e:57:84:58:
7a:83:55:fe:c7:9f:84:b0:98:dd:c7:e8:da:9b:49:be:a7:d1:
a9:87:b2:b4:8d:2d:48:12:5f:4b:ad:16:65:03:d8:95:07:7d:
cf:35:d4:0c:d0:62:19:e9:59:ba:1d:28:ae:a9:6e:9a:de:5d:
6e:84:27:2a:db:f8:19:8d:74:79:25:07:20:01:78:8c:11:d1:
6a:17:e3:a9:01:fd:bd:87:dd:b0:72:ba:bc:81:e5:c7:7c:36:
69:fb:24:9b:c3:97:11:c7:fe:b1:02:3c:69:72:e9:44:54:ef:
c1:82:bc:f8:b5:a5:b1:61:23:5b:08:ff:33:61:ad:ae:15:29:
52:a3:a3:a1:cc:4c:dc:c3:78:c9:4f:73:93:d3:f7:32:3f:22:
fd:89:55:9e:87:43:1c:d3:35:c9:d1:15:18:00:dc:bb:33:6a:
52:b4:4c:67:90:08:37:36:8d:4c:08:bd:27:c4:f1:a6:35:83:
14:fe:df:43:53:6b:3b:b1:ff:83:45:69:60:73:a5:ec:46:01:
bf:01:b1:bf:c8:85:4f:4f:f4:4a:91:01:d2:32:4b:76:0e:57:
5b:0c:1a:c3:ea:0e:ce:fc:0b:23:d0:2b:dd:63:0a:a6:52:98:
2d:6d:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:49:54 2025 by rpki-client