Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: m+/FVnHpE43aML5UcZgvbtr72DtJjaAtopTb3XtwHgs=
Subject key identifier: 30:33:EE:91:25:52:D2:FD:13:80:32:AF:3A:54:0A:DD:CB:19:CA:84
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 0197B77C20FA3CAEB1E705FAED422F36C389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: 79
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: 6/VU4azSrcNKqoQWTribfV+ej7M7hWbIN6KWNfXfTQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:20:fa:3c:ae:b1:e7:05:fa:ed:42:2f:36:c3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=3033ee912552d2fd138032af3a540addcb19ca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:68:65:6e:59:aa:60:97:83:25:38:bb:14:
10:d3:e6:9b:e1:26:2c:89:d7:0a:67:57:03:f1:00:
f4:9e:38:67:3a:13:68:46:5d:29:f3:9c:97:43:fa:
6c:9f:1e:80:ca:15:42:38:0a:c2:26:a4:c0:e1:8d:
0f:c6:46:50:f7:e4:14:22:9c:8a:f3:5f:69:cc:bc:
54:34:06:8d:c0:6e:de:06:17:40:92:65:27:a3:fe:
4e:6e:6a:16:a1:00:09:96:51:84:64:13:ca:3e:39:
f4:28:d0:2a:a5:14:ce:2e:b1:38:e4:53:2e:eb:be:
0c:30:8c:12:19:75:f0:2a:51:06:c2:3c:03:65:bc:
df:cd:ad:ca:90:4e:1b:b2:5c:88:de:aa:65:fd:d7:
bf:7f:ed:1c:97:22:2f:94:50:3d:a2:5d:08:78:6f:
53:0f:48:17:00:f4:0d:ae:8f:5b:f9:b6:92:f1:2d:
03:96:62:dd:f6:8e:41:a4:f6:e8:ce:85:92:4a:c8:
a9:aa:de:c0:3e:9d:f5:73:61:a5:d3:c8:94:b2:e4:
4f:a8:e3:ad:6c:83:ef:f7:aa:38:99:ed:d7:f4:28:
b0:af:3d:1f:a9:05:41:1d:66:0d:ff:21:10:f4:65:
6f:43:7b:ce:5d:f9:2f:66:d3:fe:97:23:bc:a6:9e:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:EE:91:25:52:D2:FD:13:80:32:AF:3A:54:0A:DD:CB:19:CA:84
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:75:52:8f:75:1f:d6:ca:ff:8c:24:4a:2d:9c:8f:b1:e7:94:
e1:d8:b7:36:77:06:b9:35:0e:a6:c0:43:c7:02:5c:81:7b:87:
68:5f:ef:57:38:70:2c:ae:a7:e5:d1:5c:1a:68:5d:c4:cc:f8:
99:45:53:27:bf:ab:51:2b:d7:05:ee:22:45:ec:91:94:1d:e8:
c6:a9:c1:83:f2:3b:23:b2:ba:9d:e6:3b:e0:ef:ed:c5:9a:db:
60:1f:bb:e1:8e:f0:79:34:20:63:7b:5e:87:0b:c0:f4:04:af:
2f:f3:37:b9:83:03:f8:75:a3:cf:a1:c0:83:fa:70:02:fc:8b:
78:8d:af:33:f0:08:36:71:1c:1e:cb:5b:8c:7a:c3:88:ea:8f:
6b:6c:ad:c6:03:c0:bd:06:7b:a5:bb:c7:84:3b:84:ec:8a:df:
b7:bb:a4:a1:83:44:b2:1f:e4:22:0d:2b:ec:27:9b:65:e0:4b:
7f:b4:0b:03:11:6e:43:00:b3:7a:32:00:24:84:e0:d2:3f:d2:
c9:8e:6d:76:ca:0c:d7:ec:70:b6:47:18:93:b3:c3:4a:0e:08:
ad:23:5e:d3:a9:ac:6b:6c:99:5a:aa:4e:2c:c7:d9:72:c5:23:
b1:4b:02:3f:34:86:42:f4:bc:8d:76:61:28:3d:a8:76:9f:bc:
4d:f3:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:05 2025 by rpki-client