Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: UoUze6r5KOthOPdYC1sJSg8pRcwDF9hRlraLZAy+/yA=
Subject key identifier: D4:22:E9:1D:87:5F:EB:91:9B:A2:2F:D5:53:57:24:40:7C:5B:C8:B1
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 0197B5FC74C89C71D6D6460F3C35144430CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0A6B
Signing time: Sat 28 Jun 2025 10:01:50 +0000
Manifest this update: Sat 28 Jun 2025 10:01:50 +0000
Manifest next update: Sun 29 Jun 2025 10:01:50 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: ZCZhcDVrIDbBQmzENfddvWr9bZZIoJ3dTBFgdkG2F1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:74:c8:9c:71:d6:d6:46:0f:3c:35:14:44:30:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Jun 28 10:01:50 2025 GMT
Not After : Jun 29 10:01:50 2025 GMT
Subject: CN=d422e91d875feb919ba22fd5535724407c5bc8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:f4:ac:e7:cb:0b:7e:d5:4b:28:a7:5c:5e:
bd:94:c4:f5:10:41:b1:b9:ed:a3:28:11:ce:50:6d:
1b:1f:a1:8a:8f:33:39:51:a9:3c:46:c5:f0:6d:d2:
df:bb:83:75:7a:08:a8:78:9d:65:8a:5c:85:95:b3:
12:0b:87:ce:ba:b7:2c:4f:af:a3:5d:9b:39:74:24:
dc:72:20:7d:4c:0f:63:4f:e0:09:32:16:29:65:e3:
03:d8:ab:55:de:ed:8a:68:09:82:1f:72:90:06:34:
9b:ae:54:bb:19:2b:23:88:9a:6a:fc:a8:bb:3b:48:
a1:ea:42:23:7f:3a:24:8e:fc:c9:f9:fd:79:27:9e:
15:3e:db:9f:5e:c8:a2:7d:bf:21:dc:bc:8d:83:b7:
bf:20:3b:17:d9:a7:9f:9f:d8:03:ca:e8:b5:45:a6:
f5:60:44:ee:0b:78:86:67:0a:bf:72:6d:03:f3:f7:
6b:bd:30:6a:fe:4a:0a:a6:a1:19:62:f4:4a:9d:92:
de:fa:a1:af:ac:3e:ac:04:02:a0:aa:24:29:f3:31:
1c:dd:5e:d3:24:79:64:ca:e0:71:40:ef:32:58:64:
11:03:db:52:a9:99:15:f8:c6:ab:21:32:f7:92:db:
47:32:c5:5c:cc:1c:1c:aa:5c:00:4c:0b:f1:37:00:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:E9:1D:87:5F:EB:91:9B:A2:2F:D5:53:57:24:40:7C:5B:C8:B1
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:58:b3:f0:0d:0c:99:6b:fa:ff:27:84:74:1e:4b:1e:fb:06:
25:97:b8:97:41:73:81:17:3b:bc:5c:64:bf:a0:68:07:27:f9:
0a:58:06:1e:c4:1f:7b:d5:fa:fd:7d:70:b0:d1:e4:48:fd:c9:
1a:d4:5b:a4:64:81:45:37:65:e7:60:f6:de:2b:45:6d:11:ca:
41:bf:2b:53:46:9f:f3:bf:5e:27:bc:53:bc:6c:28:b8:7e:07:
73:32:18:68:81:52:b9:26:6d:5d:c7:b2:f2:16:1f:be:06:8f:
e1:9c:5e:88:23:f4:1b:ae:61:c1:fb:d4:60:18:d1:88:b2:ed:
0e:c4:ca:41:4d:bb:0a:c6:51:90:7b:b5:58:49:97:f8:28:a5:
72:37:9a:48:6a:2e:f5:9b:47:c2:c6:2d:45:00:ce:ea:e2:d9:
e8:e5:86:44:9a:1d:e0:7c:c0:70:03:80:b2:d6:f4:8c:6c:3b:
a5:d7:ca:d9:79:26:a1:2f:08:0d:90:4a:34:de:e2:51:80:05:
a5:5e:5c:de:49:cc:91:95:e5:a1:d2:ab:e7:ee:37:5c:d1:88:
b2:db:fe:1c:9d:ed:30:36:40:49:2f:6c:f3:e4:55:4b:33:75:
76:9f:34:38:c6:c4:70:f1:9f:47:11:6d:5d:55:6b:28:37:79:
8a:8a:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:43 2025 by rpki-client