Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier: 2TEqWTAEbVTfviRWFhe5Jk7IoPCMcp5aCw5Ykx9rwEE=
Subject key identifier: 31:62:42:65:69:A3:57:AB:BB:CD:30:E7:1D:4C:25:A4:42:CC:0A:E5
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial: 0197B70EFC935E1C8D55CB7ECFB3321ADE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number: 06
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: M6vhhYG90lmO8NrD1HJtS2PXXPJKLUl11TFw+yAWsHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fc:93:5e:1c:8d:55:cb:7e:cf:b3:32:1a:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911c4809872294be5817b159e59f29e50609636
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=3162426569a357abbbcd30e71d4c25a442cc0ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:f9:a5:64:d9:f0:ef:27:79:ba:f3:25:74:
19:eb:ef:dd:61:22:5c:ed:ba:f5:0e:0c:57:8e:ba:
06:a1:6d:8e:24:35:00:52:e7:de:8a:fd:96:2f:b5:
2e:22:9e:e0:3b:1b:d4:d9:19:ab:15:18:f3:01:7e:
25:4e:23:59:07:65:19:6a:47:15:b5:ee:18:7b:dd:
18:3b:5c:f1:d2:00:7b:95:0a:b9:2a:c5:04:14:e1:
32:74:96:7b:45:49:d9:77:71:a7:65:3a:39:32:08:
02:01:59:5a:bc:3d:61:b0:63:58:32:4c:5f:05:67:
5b:06:39:46:c4:49:f5:aa:6a:77:dc:27:03:69:2d:
21:0f:32:73:db:c9:68:21:1a:d0:c8:be:fa:04:13:
32:5b:f4:06:1e:f3:40:4a:e4:67:0a:2a:2f:f9:e6:
5c:e2:73:93:a1:c1:20:7c:20:eb:1c:c9:93:43:74:
b2:5a:21:1b:e6:e9:67:cf:29:66:f1:76:d6:dd:36:
aa:48:1e:b3:1d:43:12:44:24:4a:f4:4c:ec:fa:4a:
5d:c8:18:dc:8d:6c:22:20:e6:43:40:21:a6:39:d4:
c6:0e:b2:c3:44:a7:13:b8:c6:6c:60:02:f5:0c:a5:
62:f4:8e:5e:c4:ac:b6:22:1e:0a:de:ed:59:a6:9f:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:62:42:65:69:A3:57:AB:BB:CD:30:E7:1D:4C:25:A4:42:CC:0A:E5
X509v3 Authority Key Identifier:
keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0a:17:95:07:d3:2d:0f:46:05:73:f8:6c:74:fb:8b:04:74:
61:dd:8f:d7:dc:32:b9:e3:e4:82:5c:e8:e5:a6:87:a0:47:0f:
48:ff:22:e8:82:eb:9b:39:68:62:35:d0:ec:5b:4c:0b:d3:ec:
88:e5:50:fe:c4:27:d4:12:ca:14:28:56:41:cb:8d:01:b1:ea:
e0:17:a7:ea:0b:b6:a5:8d:87:53:bf:52:4f:eb:38:59:08:c3:
e3:5a:11:ff:c1:22:8b:db:06:0f:b3:a7:76:bd:15:37:93:8c:
21:64:bf:49:c9:68:ab:e0:bb:d1:5b:bd:d9:2c:88:03:5a:1b:
18:c0:6a:a4:f4:c2:ed:91:2c:3b:ec:b6:5f:1b:ce:2b:e5:0d:
2f:da:48:a6:37:9d:c9:c0:ef:b7:70:c6:ac:dd:2d:93:bd:56:
c6:55:b6:a4:39:06:95:51:ab:71:7e:f7:e3:2d:ca:c3:c3:52:
3c:ed:40:1a:a8:3f:57:66:a9:b4:5a:34:cb:60:12:8c:89:14:
62:20:66:4e:e1:b0:13:a6:40:3a:44:98:6d:6d:a4:04:d4:0d:
04:70:87:00:c8:4b:af:97:e4:d0:24:c3:04:34:77:63:d7:97:
8a:43:d4:82:cb:65:0f:13:0b:2e:04:91:78:99:58:ad:f8:55:
86:83:14:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:34 2025 by rpki-client