Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: vWjvsmEc4bCUvpRR+o6LqAyPAGwmXcHfOdg83JxdkTU=
Subject key identifier: E9:8A:6D:15:40:12:6B:05:F2:E6:B5:3C:51:3F:7D:B6:FF:96:06:7F
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 0197B6A2168466E32DAE8E45B788AE28B7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 09C1
Signing time: Sat 28 Jun 2025 13:02:45 +0000
Manifest this update: Sat 28 Jun 2025 13:02:45 +0000
Manifest next update: Sun 29 Jun 2025 13:02:45 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: niq3P9MKQrda041o1HFOf9QRROUs77Wof6/TZVGN9zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:16:84:66:e3:2d:ae:8e:45:b7:88:ae:28:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Jun 28 13:02:45 2025 GMT
Not After : Jun 29 13:02:45 2025 GMT
Subject: CN=e98a6d1540126b05f2e6b53c513f7db6ff96067f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:33:aa:73:4f:9a:71:b9:0e:99:be:c2:32:
39:fa:9c:2b:7b:61:6a:45:74:f7:64:d2:4d:10:35:
39:88:90:6d:6b:43:29:d3:06:01:19:9a:44:aa:b5:
33:3c:44:28:e4:71:b2:e3:64:80:95:d9:23:57:4b:
e2:41:e6:08:26:6c:34:67:f8:85:c9:22:f9:35:fc:
bd:af:63:e8:97:9f:af:21:2a:7d:9a:43:3e:f7:79:
49:dd:50:9d:b0:e7:6f:32:e9:72:b3:a8:86:e1:40:
95:e1:51:71:af:65:ac:af:ec:bb:b8:09:2d:33:b0:
bd:03:82:8f:4e:3a:0d:39:0a:16:73:05:3d:4e:4d:
81:e1:e5:ed:2c:9f:cf:a3:fb:ab:ad:e8:ba:eb:cd:
b9:12:db:1b:16:74:a5:b8:a4:fd:0d:42:36:97:42:
c1:f9:5e:b9:5a:1a:4e:f1:a5:f4:7e:a8:b0:68:44:
a1:06:69:5f:f8:43:76:a2:e7:91:d9:d5:90:7a:7d:
de:0c:f5:6c:18:f8:e5:d0:6e:6e:f0:7a:61:3f:33:
70:28:8b:2f:2a:ec:36:93:fa:83:e6:f0:94:c5:d9:
ac:6e:24:64:78:57:02:5b:b6:80:f8:af:e7:d1:11:
8c:04:6b:c8:18:c8:4e:36:bb:cb:b2:a8:49:ef:26:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8A:6D:15:40:12:6B:05:F2:E6:B5:3C:51:3F:7D:B6:FF:96:06:7F
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8b:db:14:92:9d:bb:e0:54:da:c3:a9:0b:0e:d9:97:f5:9a:
b5:da:e0:69:2a:03:2e:01:dc:93:d3:3a:cc:9c:c5:26:c8:9b:
ee:64:43:05:16:a3:61:90:44:34:7b:94:6e:1e:f8:89:49:78:
70:48:88:5e:9a:fc:a8:dc:f1:ff:36:67:81:d0:e8:13:8b:8f:
66:eb:94:fc:1d:92:67:a8:ea:38:44:eb:71:7e:bb:20:34:d0:
a4:fd:06:a6:14:b3:6b:f9:5d:9e:17:83:71:92:4e:61:fd:ce:
ec:2b:25:9e:6e:6a:dd:e4:6f:7d:6a:06:3a:d3:e9:bc:f3:b6:
e9:ee:fe:10:34:65:63:1f:b0:15:a0:4a:b7:17:a3:83:a5:e9:
cb:ad:52:c2:ec:86:2c:12:6e:4e:e4:ca:11:db:1b:b2:72:8e:
56:43:69:64:0c:bb:5a:6a:40:a5:55:70:30:33:4e:7b:aa:47:
df:d1:31:e2:e7:2f:7b:aa:38:3a:1c:7c:46:67:cf:57:37:69:
6e:ca:91:fd:61:5e:bc:9e:94:d1:10:13:08:c2:45:5a:c9:1c:
c3:dc:b2:4d:cf:5c:f7:93:92:96:90:27:c2:ec:7f:ae:bf:db:
03:bd:88:c1:e5:29:4d:19:f8:91:71:b4:9e:58:44:22:1f:84:
d5:45:97:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:36 2025 by rpki-client