Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json)
Hash identifier: OYf72K3EysS9Dv6aVTQOmKRxLEs079XACJ7a0DjXv6w=
Subject key identifier: BD:B0:C9:09:9B:DF:99:D9:52:55:F4:E1:68:4C:E8:D5:88:AD:88:05
Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Certificate serial: 0197B7B2EAD3AC8F32EAEA58FFB1EBF00B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
Manifest number: 053C
Signing time: Sat 28 Jun 2025 18:00:45 +0000
Manifest this update: Sat 28 Jun 2025 18:00:45 +0000
Manifest next update: Sun 29 Jun 2025 18:00:45 +0000
Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: odS9KWlSoFKyPQGfFoUE67KNRq18VG2m5bis4dVnQs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ea:d3:ac:8f:32:ea:ea:58:ff:b1:eb:f0:0b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Validity
Not Before: Jun 28 18:00:45 2025 GMT
Not After : Jun 29 18:00:45 2025 GMT
Subject: CN=bdb0c9099bdf99d95255f4e1684ce8d588ad8805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:5d:6e:83:9f:3f:6d:5e:ad:f5:46:8d:a1:
e6:94:ba:fc:01:25:fe:4b:81:1b:65:b5:10:0f:1b:
cc:7b:4d:64:28:8c:70:7d:ed:9e:3d:be:23:27:86:
54:f5:c1:14:e4:59:af:59:e8:df:b9:2f:0e:46:8a:
e5:85:1a:ae:f5:20:9f:c9:4a:36:9e:1f:67:0b:54:
0e:df:2b:8b:04:cd:4b:fd:aa:a7:88:a7:a2:f5:78:
a2:e8:17:02:c9:c5:ff:46:96:c7:7d:69:c0:f1:68:
e6:fa:3b:25:37:fc:fd:97:ed:86:85:a5:b5:9c:6d:
a3:30:06:14:99:ad:a2:6a:c2:68:ff:4f:4d:42:75:
80:68:80:ae:09:f8:49:57:0d:38:0b:a2:87:1a:5f:
03:91:ed:30:e6:80:1e:79:c7:1d:2b:ec:e8:c9:4e:
8e:57:0c:70:86:5f:49:2f:97:96:88:be:6b:f7:22:
73:97:ba:f3:47:ab:a7:33:53:24:9d:0e:de:99:88:
8e:3f:59:e9:96:73:f5:35:54:c5:9a:4f:5d:91:59:
29:1b:06:8c:dd:c6:44:33:eb:b1:ef:1b:04:c9:73:
d5:2b:56:25:c1:c7:ad:8f:1c:3d:32:e7:86:f6:95:
e8:4f:5a:a9:6b:c9:c2:58:ea:56:5e:3d:23:e3:fc:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:C9:09:9B:DF:99:D9:52:55:F4:E1:68:4C:E8:D5:88:AD:88:05
X509v3 Authority Key Identifier:
keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:98:dd:77:61:5d:3e:b6:4d:de:09:b1:2c:3d:b2:52:6d:
75:d9:44:27:9d:1d:49:64:61:f8:39:6d:50:ba:d1:22:eb:d6:
51:20:9a:91:9b:c0:ad:22:55:cb:1c:ee:25:32:ef:a6:b6:e7:
12:d2:9b:c3:37:95:53:7b:b9:a2:e1:0c:46:56:f2:7c:94:4d:
a4:07:bd:97:6e:d9:b0:e8:64:44:f8:cb:0e:7a:33:4c:e7:b8:
33:94:f3:68:c4:df:d1:c9:66:bc:c6:a9:19:83:e7:2a:fd:c6:
c0:dc:33:dd:bb:8c:54:3e:71:a3:0b:92:c7:fd:34:fc:e7:8b:
bc:af:ee:cb:26:7f:97:8d:90:58:74:bf:24:2d:13:f1:bd:09:
f9:56:7e:ca:00:6e:2d:d7:20:0e:0c:00:a9:97:24:9b:73:f4:
1e:27:9b:2b:80:5a:ce:da:7e:51:42:45:8a:cc:74:82:d3:d1:
7e:29:7e:a4:05:80:74:11:ef:18:2b:82:2e:38:98:52:25:8e:
1d:a1:b7:b5:a9:8f:28:82:4d:3a:24:f1:83:68:91:e0:a8:d4:
08:5f:a0:2c:40:be:24:68:20:18:31:34:03:06:8c:5c:16:0e:
7b:a7:79:45:dc:10:69:c9:c5:cd:40:e2:61:4c:17:ea:f5:e1:
3e:22:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:43 2025 by rpki-client