Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier: m2d6lga3+0h1NUewps7O+l2EWMdZRtayQDZwvPnuC04=
Subject key identifier: 91:56:96:F6:2A:85:50:1C:35:33:44:2B:62:ED:8B:85:A9:90:D5:F8
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial: 0197B58E5AC5B4DE8F56DF2BBFABC000F05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number: 0E5B
Signing time: Sat 28 Jun 2025 08:01:34 +0000
Manifest this update: Sat 28 Jun 2025 08:01:34 +0000
Manifest next update: Sun 29 Jun 2025 08:01:34 +0000
Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: G7Ksns7pDJMkwDeFLbllQYuZgJNBTOBO6D3v6yMp9KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:5a:c5:b4:de:8f:56:df:2b:bf:ab:c0:00:f0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
Validity
Not Before: Jun 28 08:01:34 2025 GMT
Not After : Jun 29 08:01:34 2025 GMT
Subject: CN=915696f62a85501c3533442b62ed8b85a990d5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:63:b7:73:3f:2a:16:cf:40:be:0e:84:a9:
2b:67:85:b7:5c:6d:a6:64:73:66:54:c5:37:bf:fb:
7f:28:4a:d7:25:a6:af:62:cb:3e:59:cc:f7:36:97:
ea:5d:e9:d0:31:19:ea:f4:00:f4:8d:3e:3f:46:14:
54:af:9b:59:a5:f8:ec:ab:27:81:62:72:25:4c:77:
2b:ac:06:68:2c:f9:22:d9:43:fd:e9:b3:4b:19:59:
6b:33:e7:e2:97:d7:83:5f:e8:c4:21:84:51:98:2c:
a2:6c:25:4f:5c:e2:5d:da:cf:e2:8a:e0:6a:1c:ef:
68:26:02:bc:0a:a8:51:5f:2a:a3:42:82:e1:d5:2c:
c7:83:52:6a:74:33:b6:43:fe:07:94:fa:c8:ce:76:
ce:49:51:19:2b:9d:b2:5c:fd:e0:75:c4:ec:d4:af:
93:99:28:6f:30:19:96:68:d1:42:fe:3e:fb:11:e9:
d7:9d:5f:c1:a9:eb:58:c5:68:66:22:2c:59:af:47:
67:8b:a8:db:e7:70:df:91:c9:b1:62:2a:4c:8e:70:
d7:79:0b:6d:42:20:5f:f4:ce:ba:d6:ea:20:d3:f3:
49:0d:d9:8b:61:b9:d3:94:a4:23:92:34:c5:9b:e3:
d2:cd:50:cd:b9:31:f6:92:2c:43:c7:9e:3c:f6:04:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:56:96:F6:2A:85:50:1C:35:33:44:2B:62:ED:8B:85:A9:90:D5:F8
X509v3 Authority Key Identifier:
keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f1:e1:3d:95:e9:21:1e:cd:44:25:26:20:b3:34:c0:22:90:
34:c4:de:36:c1:43:29:0e:80:d0:ec:88:f3:9b:96:b3:c4:30:
8c:75:3f:be:ac:eb:47:16:43:05:c0:89:33:1b:ab:55:ec:46:
4c:04:02:79:d7:73:e4:4a:06:c3:16:e4:56:17:b6:00:30:ab:
01:a4:87:73:2a:4d:8b:f9:98:34:57:31:0d:4d:0c:a0:57:c1:
09:bb:5a:99:bd:9e:5d:01:d3:95:0c:ff:4e:1b:c4:f9:a0:d1:
ff:fe:4c:23:a3:c0:73:83:e4:4d:01:fd:e8:6b:01:be:27:21:
a0:6c:fc:cb:c1:0d:4b:f6:10:47:e9:2f:eb:1f:be:e4:68:62:
f1:23:28:e9:b0:91:df:09:7d:b4:d8:6f:c3:0e:21:a2:3e:3d:
45:d7:cb:de:35:8c:2a:5c:0a:f8:76:76:d6:dc:fa:53:4b:ba:
2f:9d:74:6e:dd:61:af:1f:c3:d7:b5:10:83:35:b8:ea:3e:e0:
98:84:3d:dc:87:c2:83:a7:5c:0e:0a:75:8c:70:59:fd:57:b8:
25:a4:cf:ed:30:f5:53:81:ad:cc:f8:f9:73:27:a2:b4:0d:ae:
89:04:03:30:8e:75:03:95:c0:fe:a4:9f:74:4e:8a:80:da:31:
80:0e:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:01 2025 by rpki-client