Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json)
Hash identifier: KIlBpy5n985XgAgwqlUrzwMc1sY5aUZSZmh4JVRQY1Q=
Subject key identifier: F9:5C:2A:31:E4:52:1E:57:1A:18:C7:2B:E8:C6:1F:A8:73:2F:93:B0
Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Certificate serial: 0197B70E99C727044E687DF84F0F1971B2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
Manifest number: 0121
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: XCn4TE9iQniTfJutJm8EfKLycv+v0SyQzu9zdf14DRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:99:c7:27:04:4e:68:7d:f8:4f:0f:19:71:b2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=f95c2a31e4521e571a18c72be8c61fa8732f93b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:b9:6d:cd:3e:66:59:41:33:51:f6:7e:6f:
78:79:7c:34:80:2a:f9:72:7a:3f:8f:68:9c:96:42:
1b:15:77:69:7b:85:27:bb:3b:2a:0d:53:2c:61:fe:
45:e6:61:b0:c7:e2:48:7e:40:d2:e0:03:7b:cb:9c:
9e:20:ee:81:95:0e:e7:c1:55:d7:2e:69:a1:80:dd:
bf:31:0c:00:7c:77:18:3e:04:7d:e5:3c:8d:14:87:
f4:2c:88:eb:8e:d5:19:ea:58:21:19:46:07:5b:d8:
5b:02:5d:b6:3a:12:c4:8b:e9:13:d5:94:91:e1:c3:
bc:94:1f:1a:37:58:63:00:79:ed:fe:7b:b0:bb:67:
74:3c:fa:fc:10:8e:33:d9:94:f0:3d:64:16:42:a5:
cf:36:26:34:2c:10:bf:1d:c3:5b:65:c6:7d:91:a7:
b7:89:ab:51:50:4f:e2:29:4d:95:40:ae:34:6c:bc:
98:2f:87:02:96:02:34:e4:26:d8:90:50:f0:66:21:
df:a8:3f:d9:da:74:34:43:5a:10:78:fd:4f:e5:11:
34:26:9c:1a:10:5e:e9:82:75:b5:8f:59:30:40:00:
52:d6:bb:a2:c8:bf:64:e4:90:13:ba:50:22:4f:18:
09:97:b7:2f:98:6e:84:10:93:70:01:ff:07:f0:ec:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:2A:31:E4:52:1E:57:1A:18:C7:2B:E8:C6:1F:A8:73:2F:93:B0
X509v3 Authority Key Identifier:
keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:13:aa:9f:9a:b5:20:aa:22:90:fd:b7:d7:9d:f2:25:3b:8b:
2f:80:c0:58:42:de:19:ac:4b:45:be:a4:27:33:7b:5b:22:57:
fb:fb:7d:e1:f1:3c:a5:77:fb:c0:ca:19:cd:28:3e:f1:74:3f:
a3:40:b0:4e:eb:7a:fc:e6:da:e3:81:f8:2f:3e:a6:d0:ac:12:
76:ed:4c:fa:9f:56:ef:d1:32:e9:47:f9:56:00:87:23:b5:2b:
9e:10:8d:8c:0e:90:6a:49:b1:ea:fb:d8:6f:35:28:02:f9:5d:
93:04:c9:ea:a9:84:ed:dc:91:cc:f5:67:51:b9:db:72:13:0c:
70:a3:b7:ac:9c:15:f2:b2:2d:78:59:aa:e9:55:c3:40:5a:82:
95:0c:26:fb:48:bf:8b:af:cf:18:c5:a0:10:fa:d9:84:21:1d:
3a:76:88:9d:e0:63:3f:82:04:4f:49:99:fc:25:9f:91:97:83:
a8:8f:9f:30:58:fd:d5:df:da:aa:13:f6:4f:91:2a:4f:1d:71:
38:aa:78:7d:21:16:06:20:32:16:0a:42:8a:b7:e4:8a:f6:bc:
ed:8a:dd:7b:f7:e5:87:0d:bb:4b:ef:15:42:19:bc:60:12:1b:
17:65:9b:1d:eb:cc:c1:c6:73:81:69:4b:c1:4d:77:00:32:c2:
e2:04:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:53 2025 by rpki-client