Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: UWyhcuQkB9Ag0hWU0XkoJzSF5EB0b6e+dCX2ixW3oQc=
Subject key identifier: A5:29:CC:99:22:E7:E7:CD:07:60:18:6A:EE:44:C5:B4:46:57:48:12
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 0197B6A042ADC765B65F1C0B4E1BC8CC700B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:45 +0000
Manifest this update: Sat 28 Jun 2025 13:00:45 +0000
Manifest next update: Sun 29 Jun 2025 13:00:45 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: v7OyKZUBFnr6DGB4bOu5IMYx0ho/KjkU0pP11FmCML0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:42:ad:c7:65:b6:5f:1c:0b:4e:1b:c8:cc:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: Jun 28 13:00:45 2025 GMT
Not After : Jun 29 13:00:45 2025 GMT
Subject: CN=a529cc9922e7e7cd0760186aee44c5b446574812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:7d:db:59:81:ac:d0:4c:ed:18:0d:7b:47:
ea:62:86:55:6f:8a:1b:9b:eb:e7:f9:45:f8:b7:e9:
ab:86:f5:05:2c:6e:9c:42:c7:6f:e7:db:62:98:81:
4f:6d:62:0d:b5:76:01:6a:bf:1a:7d:94:4e:a3:64:
38:e4:65:a2:49:38:0f:f0:43:78:9b:c5:be:4f:24:
5b:ce:b3:3b:93:f4:d5:17:58:40:4a:5c:23:f7:a9:
f8:40:ca:3a:73:fd:c6:d9:8f:06:51:92:b2:0e:9d:
5b:ae:04:ec:cb:22:d7:b0:74:c4:52:d2:4b:98:4b:
a9:1d:06:5a:5c:8a:c7:2b:1c:9b:51:01:2c:7e:a6:
72:91:bb:3b:e3:05:ef:e9:58:ce:09:db:0e:f6:c0:
a3:99:29:0d:e0:4b:e7:be:21:ef:c4:be:bc:7a:82:
93:c5:52:3c:37:b9:fd:9d:29:79:e1:68:29:3c:96:
8b:cf:ae:83:db:44:bf:84:6f:56:33:72:b2:21:c5:
7e:e3:8b:b6:f5:a6:4b:27:a8:fa:5b:d7:89:a8:76:
1e:6c:cc:f9:1a:42:b3:a3:c3:a2:ae:9a:02:82:99:
b1:b9:10:d3:eb:44:86:c1:ff:da:0a:e9:cb:b9:a8:
65:60:03:22:b4:91:d5:2b:21:9d:b1:96:f7:a4:9a:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:CC:99:22:E7:E7:CD:07:60:18:6A:EE:44:C5:B4:46:57:48:12
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:42:1f:97:2a:e0:b6:6b:a2:52:e1:8d:97:7e:bf:6e:bf:
18:de:d1:12:8e:19:7b:10:ec:96:a8:cf:c9:67:7b:c4:96:49:
e5:bd:11:31:90:4b:66:7b:90:c5:0f:fe:e8:31:0b:76:db:63:
68:a5:45:f3:64:7f:32:c5:6f:18:b4:7c:67:b4:97:7e:15:ee:
3b:d6:54:0c:f7:2c:3a:cc:22:c3:f1:c8:43:a8:4c:07:8c:31:
d0:63:73:35:5f:e8:f9:ba:12:7c:de:34:1f:70:13:e7:60:93:
2d:d1:48:10:4a:cb:78:22:9b:6d:e4:1b:3c:b8:e1:f8:38:db:
c5:82:6e:a6:19:a4:d5:ba:10:7c:d8:41:96:ef:cb:b6:0d:b1:
6e:61:52:c1:c5:57:d8:e1:45:f8:b9:7f:20:fb:18:3f:66:65:
b2:11:f3:4f:c0:9f:5c:9d:2e:9e:ed:39:86:58:18:8a:9b:14:
f1:79:e0:af:6f:7d:be:1e:58:1d:ad:ff:aa:76:ea:74:ee:ef:
cc:4b:3e:75:d6:4a:31:85:d7:79:87:8a:9e:1a:a5:a7:5d:31:
af:82:3a:82:b1:1f:a1:25:48:d4:a2:8c:16:d9:2b:14:c9:8c:
f5:3f:d0:85:08:21:0a:bc:ba:f6:59:e2:4d:a2:ca:31:c4:c4:
0d:96:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:17 2025 by rpki-client