Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
File: 36xiikxcxuVw9PQcTg1jlUkbTX8.mft (raw, json)
Hash identifier: 58+poZQO75+Agz/z27pvkL1mkwvieatcduehfwUwC5s=
Subject key identifier: 64:09:77:A8:F3:6E:A9:11:5B:7E:84:F4:EB:43:83:B9:4B:30:6E:DF
Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Certificate serial: 0197C537DA3E13AB992E4C8A358FF9D17CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 09:01:01 +0000
Manifest this update: Tue 01 Jul 2025 09:01:01 +0000
Manifest next update: Wed 02 Jul 2025 09:01:01 +0000
Files and hashes: 1: 36xiikxcxuVw9PQcTg1jlUkbTX8.crl (hash: gu4lYri9WKQFh/sWCmyaaKatFS7lgQOW1VfAr6GneoQ=)
2: 7JS41vM91mOZftvqn8jPBmhbJuk.roa (hash: aROAKgddtydWzjEbRgk4taCxbXsDkr5HWG29W6Kls8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:da:3e:13:ab:99:2e:4c:8a:35:8f:f9:d1:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Validity
Not Before: Jul 1 09:01:01 2025 GMT
Not After : Jul 2 09:01:01 2025 GMT
Subject: CN=640977a8f36ea9115b7e84f4eb4383b94b306edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:37:38:83:71:ae:1d:e2:69:cc:f3:9d:55:
ee:ff:e6:c3:c1:4f:d4:e1:e1:af:ec:7b:e1:63:8c:
c1:7f:85:37:3f:ee:65:fb:4d:28:e9:e9:0f:45:ff:
77:ca:92:41:51:8f:69:ec:80:71:c8:81:05:38:c9:
dd:f0:e3:1c:27:fe:f2:bb:22:29:50:21:7f:d0:c5:
b3:2d:ad:14:6b:4e:71:ac:35:8b:69:9e:d1:da:c6:
7d:3a:b9:32:7a:ce:d3:60:bd:1a:1f:14:75:4f:a0:
27:0e:61:1d:76:f5:af:51:b7:63:60:9f:c2:a0:cd:
d3:cd:9d:21:28:f9:f1:26:b9:e5:b4:dd:8d:75:29:
5d:85:e4:61:ad:24:00:1f:ed:21:1c:68:c5:c0:db:
9a:7e:18:4e:a4:15:d0:c9:2f:7c:44:e0:cf:06:ba:
5c:cf:2e:38:f5:fe:0e:5b:04:f8:fd:59:98:1b:43:
e0:7b:60:4b:27:42:ba:96:9b:65:5a:8d:75:18:4b:
83:03:73:3d:11:ee:7a:0d:31:b5:df:ba:40:51:ae:
6c:b3:05:b2:08:a0:87:93:1f:0a:20:3c:9f:c3:51:
b0:49:bf:26:bb:33:2b:86:75:c6:34:4a:61:bd:5d:
24:2f:b3:3d:bb:e1:1e:fa:3d:72:2c:c5:3a:b5:3f:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:09:77:A8:F3:6E:A9:11:5B:7E:84:F4:EB:43:83:B9:4B:30:6E:DF
X509v3 Authority Key Identifier:
keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:80:02:4a:95:75:70:cf:de:15:00:4c:00:3f:0a:34:7b:
2d:b6:55:39:d6:15:31:72:23:d6:da:c6:f5:5e:54:e6:17:65:
db:f9:22:b6:fa:93:20:a6:ee:66:6c:60:c4:fd:e8:bb:55:e1:
29:75:05:66:ed:23:89:48:75:ff:e5:1a:31:7a:cd:8f:3a:a9:
53:ba:15:ab:8b:ac:bb:6d:8d:a3:89:d9:3d:ca:ab:4d:18:aa:
38:ab:1f:aa:32:44:12:c5:ff:3d:27:47:0c:6b:13:15:60:c1:
ee:14:d0:98:e4:0e:b1:dc:60:f7:6b:3e:b7:fa:87:ce:94:67:
89:f1:fd:29:7d:6d:a9:6b:b2:38:da:02:1c:2f:a4:55:0d:17:
aa:cc:fd:76:a4:9a:56:52:ce:d3:b4:c8:8d:2b:c0:83:57:68:
31:ec:e3:c7:a4:a6:35:06:72:94:a5:f2:a3:f8:1f:32:0e:95:
79:b6:bc:78:9f:bf:ef:73:2a:bc:71:dc:b5:54:e1:0b:6f:5e:
58:c0:eb:4c:44:c9:58:25:44:1b:7a:cb:9c:58:fd:1a:35:d3:
0b:fe:f5:00:0d:04:65:5e:cf:22:e0:05:d9:8a:2c:b0:19:d0:
90:de:33:cb:3e:f7:07:41:5c:e1:7e:8c:2b:69:51:4e:a1:5b:
89:df:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:02:54 2025 by rpki-client