Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: npQeP+n3XDqXqkpv3Ki6l6Ci53MRB2vEeEtDjTl7nAY=
Subject key identifier: 09:89:E9:8A:50:A0:27:0E:7F:51:F7:B8:AB:2A:33:1E:45:D1:14:D0
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 0197B6A0CA779E000DFC8B1A323D60F4DD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: PKXTxJ8FnR77WUIDuiL1HsuwC9D+K0n9NsMoK9Y+YKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ca:77:9e:00:0d:fc:8b:1a:32:3d:60:f4:dd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=0989e98a50a0270e7f51f7b8ab2a331e45d114d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:bf:a6:e7:01:54:19:ad:ce:ed:a8:51:cb:
3f:ca:47:93:c3:57:77:34:a6:d3:80:6d:da:6e:92:
da:8f:4e:45:46:a2:45:bf:27:7b:d0:da:85:a1:12:
08:e0:ae:d8:18:00:b9:66:10:8a:df:9f:74:33:4a:
e9:4c:2f:b3:1a:b4:09:bc:1b:38:04:14:d4:7e:23:
65:19:89:55:fd:89:d6:b8:f0:55:2d:51:ac:10:37:
44:7c:84:bc:8b:e9:3b:e8:3f:64:b9:fe:ee:b6:dd:
c7:4a:fe:ea:c5:97:09:0d:9a:8f:f1:3e:17:c6:6d:
ea:d5:8c:48:f1:4e:d6:8a:fa:c9:02:f3:d8:31:ed:
80:c9:ba:20:58:a9:e7:3a:c6:19:df:73:11:f3:40:
f7:de:75:49:9c:9b:c1:c7:45:fa:61:05:62:1e:82:
44:63:bd:b6:54:39:d6:c5:4c:85:cd:8a:cc:7e:bb:
f8:b6:b1:fc:ee:10:08:92:2c:f0:1b:cd:af:07:6e:
63:0e:69:37:bb:7c:a5:55:05:34:c9:e4:15:5a:d5:
21:e7:79:6c:48:15:55:09:e5:f7:72:82:f5:1c:8c:
46:e5:eb:05:a2:4b:49:d6:be:95:50:da:04:94:f5:
dc:5b:ae:f5:36:05:7a:29:65:4d:42:0a:ed:6e:fb:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:89:E9:8A:50:A0:27:0E:7F:51:F7:B8:AB:2A:33:1E:45:D1:14:D0
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:83:90:6d:86:ea:f3:71:1a:d2:b4:81:06:9e:47:61:f8:bd:
37:ef:65:21:ad:44:07:9e:03:e7:22:31:cb:70:a9:bb:0d:60:
2b:9c:8c:1c:1e:b9:30:f8:bb:6a:50:8c:06:b3:e0:19:19:a2:
23:f5:24:30:c4:75:50:6b:e8:7d:00:85:fe:32:3d:a7:72:04:
30:21:24:8a:47:e0:03:d0:21:c9:24:16:50:97:c1:b3:13:2c:
40:5e:9d:27:80:65:34:e1:80:ab:38:6c:49:90:c8:ee:2c:d7:
a2:7d:c6:77:43:b4:8f:32:4b:d1:f9:a5:d9:4b:51:4a:02:eb:
2b:fd:b7:e2:40:ba:06:63:81:a3:31:77:57:99:43:37:53:3d:
ae:e6:e5:71:1b:ea:1a:8a:0b:9a:2d:bc:50:4d:4d:81:3a:25:
29:2d:9c:d4:64:8d:0e:b1:47:b7:ae:3e:f1:39:41:67:c9:45:
8e:19:de:fc:3f:73:d4:a3:98:99:a6:3e:00:f0:5e:e2:c3:81:
60:ec:a8:08:35:4a:01:fd:23:2e:34:3f:80:c9:24:39:85:75:
16:ad:03:ca:f5:57:a2:bd:e9:2f:ea:b0:f6:c3:cb:30:e8:1a:
2b:6c:22:0c:27:de:99:ca:f7:6c:e8:23:a2:40:3c:0a:c3:95:
82:8f:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:51 2025 by rpki-client