Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: lbJ1eyBGUHjL3Cp8BpFbmPgCyH0mJiMJLwi6t2ky5Cw=
Subject key identifier: E2:45:2F:0F:2C:B8:7C:78:B4:B9:22:5C:81:A8:E8:9F:ED:7D:ED:B5
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 0197B88EF8FA9F90BC66C170A3C7BAABE1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:06 +0000
Manifest this update: Sat 28 Jun 2025 22:01:06 +0000
Manifest next update: Sun 29 Jun 2025 22:01:06 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: 7aTR3grN2wOssCTh/r74F0abBUBI7P3CW6kdlxnHNoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f8:fa:9f:90:bc:66:c1:70:a3:c7:ba:ab:e1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Jun 28 22:01:06 2025 GMT
Not After : Jun 29 22:01:06 2025 GMT
Subject: CN=e2452f0f2cb87c78b4b9225c81a8e89fed7dedb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:bc:71:f7:8b:86:f7:4a:88:24:f8:06:43:
35:63:49:3c:66:6b:b3:98:9d:be:25:21:cf:72:16:
11:f1:a4:57:b1:ec:b6:b1:84:8f:08:c2:94:de:22:
75:e6:67:ca:01:64:af:22:ef:dc:49:9a:00:d8:86:
5c:57:76:11:ba:a6:b9:86:63:2b:04:b5:13:16:ff:
0b:ca:ce:ca:5d:73:79:a9:f3:40:fd:1e:de:17:36:
21:e5:e6:15:ac:4e:d0:62:ca:6b:5c:18:29:07:ff:
77:88:52:67:d3:a7:34:12:89:0d:7e:2e:21:f0:b7:
e7:5f:7b:0e:b9:ed:12:21:93:49:a0:af:f0:bd:8d:
c8:a6:4a:4a:2e:24:d6:2f:21:03:cc:85:5a:27:3d:
2a:63:f6:b9:69:39:3b:55:e0:49:a6:ac:76:83:be:
d7:95:54:79:fd:d4:a4:76:14:65:79:43:48:da:16:
d1:ff:9e:be:7f:3c:ba:8b:11:3c:ab:50:47:7a:22:
c3:fb:eb:34:fc:0e:ab:7e:13:1b:10:0d:50:9a:26:
aa:87:c7:d2:9b:80:20:09:39:b9:6c:89:ca:4a:15:
01:77:2f:6b:7d:78:80:09:e8:6e:51:db:3e:c2:88:
d4:a2:5d:73:fb:3f:80:75:56:9f:72:fd:e2:dc:d0:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:45:2F:0F:2C:B8:7C:78:B4:B9:22:5C:81:A8:E8:9F:ED:7D:ED:B5
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a2:d5:43:dd:c3:f8:d3:ec:28:5e:b3:0c:dd:a0:92:b4:31:
c5:2f:9b:fa:5d:90:1c:fc:40:ef:dd:19:92:76:7c:9b:b7:7d:
14:82:0c:dc:d2:e3:f3:1c:a0:f2:95:de:e8:50:78:3b:64:84:
23:1d:fc:c8:f8:8e:b7:0d:15:78:37:e5:ee:66:b1:ce:9b:fc:
fc:e9:11:69:93:04:fd:bf:70:e5:45:ee:9d:9a:fd:fb:1b:92:
63:c0:06:29:52:d6:f8:1b:b3:bc:cd:b9:c1:ad:50:22:be:4a:
f1:ec:d7:44:1d:d0:21:3e:21:6e:c4:6b:36:b9:3b:b8:8e:86:
64:0d:e8:44:eb:fa:da:b0:11:7c:65:15:6c:ed:f2:e3:c8:98:
10:b0:64:a4:0a:e9:40:ff:8a:ec:5a:79:0a:70:4b:f8:70:c3:
34:12:1d:77:8f:be:f1:65:6b:bf:b6:33:29:32:cb:c9:b7:5e:
eb:35:b3:88:9b:c6:5b:3e:98:08:f6:a1:3f:f2:fa:70:f6:97:
d0:f8:64:5c:90:db:f6:a5:0d:03:f0:d4:4a:25:fe:7a:35:85:
41:ac:2f:f7:e6:2b:09:4f:ea:b3:bd:fd:43:b5:c3:5a:4f:53:
93:0d:69:33:85:a7:1b:70:c2:fa:cc:ca:bf:f3:16:ad:2c:90:
7d:6d:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:04 2025 by rpki-client