Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: ZXY7LzKMdp2LSBTTdkLe02STZqkDYmMQNUkLXGV4oow=
Subject key identifier: CA:9B:0B:FF:EA:C3:79:76:99:E8:FB:72:D8:76:23:E8:8F:07:27:49
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 0197B6A14350003EB059890FC659E850DC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: BF
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: GPnNvwAd5XpYOUpcmaNrhthZ5O8waw8e5FtRBzPUiqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:43:50:00:3e:b0:59:89:0f:c6:59:e8:50:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=ca9b0bffeac3797699e8fb72d87623e88f072749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:92:d0:0a:18:96:a4:cc:8f:23:6f:32:c7:
b0:4b:9f:9a:d5:d4:de:1d:89:3d:51:3c:2b:a7:ab:
64:a8:d5:de:03:25:ed:af:9e:bd:a0:fc:76:c9:3e:
6e:4f:e6:53:87:99:34:a2:6e:56:6a:06:71:5e:ca:
3e:bd:89:6d:73:7e:b6:a1:fc:d5:b5:87:e7:4f:88:
fd:fa:d2:de:b2:61:d0:61:02:6f:69:0a:18:44:9c:
3a:52:c2:bb:68:b8:08:c9:e5:97:9b:41:a0:d4:21:
2e:72:15:88:20:0a:30:b6:77:5b:a7:63:b7:ee:81:
59:3b:49:ab:26:fc:64:e1:52:e8:35:fb:62:c2:ea:
5c:f9:ae:76:5e:05:9a:f6:7a:e5:02:bb:a8:c7:78:
34:89:95:bb:90:23:a8:b0:5e:01:62:3a:5f:89:2f:
aa:1a:c1:fb:85:e2:6f:df:fb:8f:12:a2:94:8b:69:
65:d5:c2:ae:c1:45:2d:c5:98:9b:d2:8a:10:58:3f:
1b:e8:4f:8b:d2:b1:f7:4d:fe:b0:e0:f9:8c:b9:29:
83:19:77:eb:42:4c:3d:6a:85:ef:3f:5e:02:3c:5e:
9d:82:b6:1a:bc:f5:d1:ce:a2:63:fc:06:d7:de:06:
ca:3c:4a:af:21:f9:96:99:ef:3a:15:37:69:6b:2a:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:0B:FF:EA:C3:79:76:99:E8:FB:72:D8:76:23:E8:8F:07:27:49
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b9:b3:c1:ef:26:e0:07:60:6d:1e:54:90:31:21:ba:cf:25:
ea:c5:6f:e5:e6:9a:26:60:8a:c7:4c:85:75:de:4f:47:11:f4:
fc:9c:c9:d1:b3:04:86:5a:e5:46:e9:96:00:98:ae:c4:12:5c:
a5:9f:e4:bb:6f:5b:38:21:c8:17:c7:46:a7:3c:c6:26:64:de:
c1:ed:a5:fe:c0:58:33:de:52:23:8c:96:3b:8a:d5:90:65:38:
6c:bd:45:dc:79:e6:ea:50:bd:b0:cf:0d:77:bb:24:cd:36:be:
af:fd:5a:60:c2:a2:34:49:7a:27:98:89:98:18:c3:2f:54:82:
8e:e1:42:64:f4:87:a0:41:e7:c4:ef:9a:73:a2:41:82:11:ce:
ed:f8:76:19:54:68:ce:a5:a8:12:2d:df:ef:9f:60:fa:b3:9e:
17:0b:24:5c:53:7e:45:bb:60:6f:8b:20:15:66:54:6b:16:2c:
0f:ce:f8:c3:7d:1f:7b:3e:da:40:9c:03:b7:19:ec:9c:a2:a8:
82:dd:a2:a3:90:9c:dc:fa:46:af:09:bc:6f:1c:c8:0b:06:e3:
d6:9e:17:f9:89:46:1b:90:4f:cb:12:d7:c6:86:df:3e:93:71:
3b:d4:d3:1c:93:d5:31:09:56:05:be:4d:14:c1:ef:cd:1f:fb:
55:e5:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:25 2025 by rpki-client