Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
File: M1lkDZyLY0Pghqr4vosw6MMdK40.mft (raw, json)
Hash identifier: Jax6UuBBPRZ5v/vLzuL7L/B2gAxun5OqvCnT+s0nMAk=
Subject key identifier: 66:DF:77:03:6F:CD:D1:AD:58:6C:CA:45:55:6E:E6:7A:D4:C9:9A:06
Authority key identifier: 33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
Certificate issuer: /CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Certificate serial: 0197B6A0BA6E8B688ED30D03115A69094FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
Manifest number: 033C
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: M1lkDZyLY0Pghqr4vosw6MMdK40.crl (hash: D/jQ78Q/EzcBU4PCPPGE6u6Oj/NSeYx2AIZTdRaNtH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ba:6e:8b:68:8e:d3:0d:03:11:5a:69:09:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=66df77036fcdd1ad586cca45556ee67ad4c99a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:35:28:ba:25:b3:ad:5b:11:c2:0c:af:8c:
b3:57:01:2d:ba:85:75:e4:f4:a9:a6:b3:40:76:23:
e1:79:65:e7:e3:0c:60:d7:c6:ce:3c:ba:dd:8f:78:
95:d3:35:66:02:d9:b8:24:09:ca:89:69:25:67:ab:
9e:f5:3b:ac:37:e2:87:d1:50:aa:8a:7d:5c:44:4f:
e0:bb:2d:3d:23:01:2c:dd:c8:f0:45:f7:ae:d8:c0:
3a:ba:5e:d4:61:5c:15:5e:76:91:94:02:e1:d9:fc:
3c:7d:22:b3:f0:22:db:dc:24:30:69:02:87:7c:9d:
d3:35:b7:3d:4b:a2:50:62:bd:21:6b:b4:bb:41:c3:
41:73:15:b2:87:11:14:62:5d:f9:bc:1f:66:f1:f1:
08:bf:ec:b1:b1:20:e9:cb:46:6f:49:ab:fe:9e:fa:
0a:45:58:e1:46:e7:10:a3:bf:86:ea:e7:04:c7:23:
9c:a5:b6:64:2c:db:34:4a:27:e5:0b:d7:87:d2:94:
8a:c6:43:0a:e0:ed:68:f0:03:97:86:fb:b1:c6:b8:
ad:fb:18:26:8a:c2:3e:7d:05:5f:1b:d6:a8:d2:be:
9c:12:37:fa:23:ed:47:a4:15:e5:45:e3:7d:1f:7f:
13:db:87:b1:0c:15:15:ab:0d:7d:dd:1d:0e:b1:4e:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:77:03:6F:CD:D1:AD:58:6C:CA:45:55:6E:E6:7A:D4:C9:9A:06
X509v3 Authority Key Identifier:
keyid:33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:c8:f2:db:c3:16:fd:9c:d6:be:85:f3:17:0c:50:7b:70:
1f:c4:bc:d5:22:c1:ce:14:4a:f1:0d:10:42:35:ec:ce:62:12:
a8:f6:68:d7:a9:df:5e:63:ce:9d:b3:24:5c:db:4f:ff:41:64:
0b:f5:c1:98:17:54:09:bf:a9:ac:58:91:2f:38:3d:24:02:68:
c6:20:e5:17:45:ec:cd:d1:6a:e1:06:1b:4e:7c:18:86:3d:d5:
4f:2a:9c:d6:27:a8:d2:3f:86:64:e8:2f:29:ff:a8:19:c5:75:
37:d4:a0:65:14:31:84:a6:3f:e2:9d:e7:90:12:35:32:b5:f9:
a2:a1:ea:30:0a:6d:a2:37:c2:49:5d:86:b6:a6:f3:fd:44:19:
4a:25:6f:db:dd:1d:a9:6e:69:03:d8:b3:5d:c4:d5:86:0a:4a:
2f:54:38:85:8a:74:29:40:23:f0:1b:bf:a2:7c:36:44:cb:16:
5e:7e:79:a4:92:a4:a3:db:ab:5c:2e:e1:8a:a9:54:e3:79:dd:
ce:78:a7:c2:23:e4:e6:7d:2f:46:ee:96:ef:34:16:0b:b9:46:
22:12:91:dc:a2:0c:cf:e0:9b:17:52:76:1f:63:5a:e3:c3:da:
db:20:76:26:ef:74:22:05:38:c8:c5:e0:53:2b:33:5d:45:97:
cb:07:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:51 2025 by rpki-client