Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier: y7pBNCTEnkNKqhBWjelgrow+uqhK2t3fZOtaErQNYJg=
Subject key identifier: A9:4F:26:15:27:BF:A9:54:AD:37:DC:C2:A9:F8:03:7E:BA:7E:18:EC
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial: 0197B6A1EFA4D9E20E44DE1CCE46D2F3EFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number: 0FD9
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: BsTRR1/BWKx5wJXQm/dFowzTIUfyIUZAThvz4gLDHL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ef:a4:d9:e2:0e:44:de:1c:ce:46:d2:f3:ef:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=a94f261527bfa954ad37dcc2a9f8037eba7e18ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:82:8c:43:8e:c9:94:ba:e2:25:0d:53:52:
4b:8a:e1:f0:c0:3a:62:e8:69:68:e0:1c:77:58:96:
ec:b6:be:82:3c:b0:89:de:e5:f1:4e:af:f0:05:1c:
01:bf:03:dd:09:db:81:ca:59:af:30:b2:17:2e:ec:
45:51:a8:38:45:80:fa:5b:aa:d0:bf:48:84:6f:88:
21:b3:75:a4:da:e7:58:98:e6:22:a1:a6:07:32:a6:
d0:0a:00:62:48:50:b0:d1:fd:92:29:3a:65:70:f1:
3e:be:01:a1:91:66:98:f7:28:d3:d0:5e:2d:84:28:
ee:75:3a:58:94:49:d5:9b:16:26:28:0e:93:36:49:
44:32:06:a3:9f:27:31:8b:94:a3:58:29:99:c2:ac:
b2:52:77:c8:b6:6b:ac:4d:09:01:84:e0:20:25:85:
12:cc:5d:07:9a:64:5e:e4:69:d4:fe:a7:57:64:35:
10:80:69:ef:80:9b:ed:a6:fd:09:7b:ab:5e:a6:11:
6a:a4:dc:bb:55:9c:26:40:96:b6:f2:de:38:6b:e9:
55:99:f8:54:be:f4:24:51:a5:b9:a6:18:9b:2d:b8:
0f:92:4d:64:46:d9:d3:f5:c3:07:80:cc:5d:ab:36:
7e:ec:24:1e:d4:2f:ca:9c:38:a1:bb:06:c8:35:68:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4F:26:15:27:BF:A9:54:AD:37:DC:C2:A9:F8:03:7E:BA:7E:18:EC
X509v3 Authority Key Identifier:
keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:14:a2:99:ae:64:d3:9a:a2:8b:39:61:fb:b3:03:39:5f:7c:
cb:ed:4a:d2:6d:c0:17:5b:6f:76:f6:c7:46:8b:0c:71:41:5c:
71:5d:15:fe:b6:78:f5:bd:ed:38:c3:44:a5:ac:af:98:b2:cb:
8d:e3:10:89:35:b8:d0:83:e7:96:56:0b:11:63:fb:b3:4c:82:
22:90:27:ea:9d:49:33:4d:cb:5d:d7:03:05:b2:22:4b:33:5f:
86:e4:31:ee:95:8f:d6:b5:f3:20:81:72:2b:ea:5d:81:70:50:
81:3c:0c:c4:f5:54:44:7c:23:58:49:27:9a:e9:54:cd:ad:3e:
d9:d5:ff:c7:6b:df:9e:cf:8e:03:c3:e1:f5:34:b1:ec:e2:10:
76:c0:a0:cd:df:41:90:ca:3e:52:28:0b:26:3d:e0:ee:df:bd:
c1:db:c3:d9:b3:70:7e:2e:3a:cb:d6:55:67:cf:ee:4c:d0:84:
1c:aa:e6:e4:c0:db:fc:ec:ed:4f:5a:27:ac:c9:0e:3b:77:82:
37:ce:de:6a:fb:b6:ff:d9:71:64:7a:34:92:14:7e:6f:02:e6:
c0:a6:cc:dd:6b:2d:cf:10:82:64:30:21:db:73:eb:fb:f4:d4:
a7:b1:d9:e7:ca:d5:f7:1f:d1:6b:2a:c6:35:7d:2f:a2:55:d8:
ff:15:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:22 2025 by rpki-client