Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: qKcgyNPHTdw4drsZnPxSR4C6sJoJBc93CPyHKgydblE=
Subject key identifier: BC:0F:C3:65:0F:91:8B:4E:CE:04:92:3D:90:55:A3:53:1A:17:70:46
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 0197B70F412D4F0908B4EAAF7D27FA87304E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 12EC
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: 050mR3Ehrc+Rl/gYayTD4H+S0D6yetNw6A2yg2xGcUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:41:2d:4f:09:08:b4:ea:af:7d:27:fa:87:30:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=bc0fc3650f918b4ece04923d9055a3531a177046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:90:a1:b7:b8:39:54:da:67:6e:b1:6d:0c:
e2:71:12:70:b2:97:fb:9b:1b:fe:22:e7:ec:33:6c:
3b:25:f8:61:23:09:bd:ee:30:ef:df:cf:b0:19:4a:
6b:9e:f8:45:30:7a:2b:48:d1:fc:56:42:8b:84:2f:
ad:65:7c:0c:66:76:64:eb:1b:ed:d4:88:74:b9:09:
06:a9:06:66:55:9f:a0:c7:dd:57:00:b3:51:96:0e:
3c:89:db:d9:c8:5a:29:92:ef:8a:8f:b5:63:03:40:
ae:02:c2:ec:17:93:b2:6e:13:9a:ef:95:a8:d6:46:
51:4f:ee:e4:01:be:6f:51:41:9d:16:af:c0:56:95:
42:7a:40:e1:af:54:5e:2e:3e:3d:8c:13:04:3d:c9:
ee:72:2a:9d:03:a1:27:96:f1:69:91:6a:63:00:68:
f8:76:c3:86:96:af:73:1d:4e:8c:87:f4:39:4f:f1:
91:c5:74:98:2a:f9:af:15:53:cf:f2:55:da:04:00:
f6:07:06:be:39:30:a2:1b:03:f9:d8:09:31:20:e5:
ad:5a:22:0b:1e:69:17:a0:64:5f:f4:a8:cd:d8:bb:
2f:64:d4:b6:36:4d:66:89:70:1a:b8:e0:23:7c:de:
e3:32:ba:0b:8c:8e:6f:76:42:cc:3b:12:05:58:01:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:C3:65:0F:91:8B:4E:CE:04:92:3D:90:55:A3:53:1A:17:70:46
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:05:83:f9:75:ae:a0:da:14:20:c4:ca:36:67:90:e2:be:83:
8c:8c:ee:0d:54:45:d2:a5:05:1c:52:54:87:e0:a4:a4:bc:44:
cf:0f:97:0f:84:a7:f2:94:93:c2:92:9d:25:2c:5b:c1:91:e7:
bf:8f:a0:36:a9:af:4e:48:54:b2:a7:bb:8b:46:00:92:c0:9c:
ee:39:c8:f8:84:47:49:07:50:d9:f0:dd:45:12:45:fd:e1:f0:
9c:95:8b:92:9b:e5:1c:b4:7e:18:20:c3:db:41:ca:01:88:b7:
26:25:09:eb:ca:dd:83:3f:b0:f7:7b:ea:9e:a3:6a:e9:b0:23:
bb:36:54:35:77:21:52:50:76:e6:4c:a2:52:3f:3c:ec:bd:74:
8e:ab:be:60:f8:61:9c:7c:ce:4a:78:1f:16:71:6c:36:d8:c8:
de:da:0b:c7:e0:e6:9e:7b:25:3c:a9:c8:1a:b6:52:c0:17:48:
59:82:b1:ed:80:33:b4:96:7b:bb:a8:68:5b:9d:1e:9b:7f:70:
29:f3:2b:18:07:df:09:bf:cb:f3:6b:d6:3f:f3:3e:0b:32:6a:
04:99:dc:81:38:95:50:5b:2e:5a:cb:f1:1b:a1:c2:87:a7:f8:
df:21:c2:a3:80:39:48:4d:43:d7:df:6d:67:d2:54:cb:2a:22:
3b:19:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:25 2025 by rpki-client