Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File: d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier: woJfL0hmpjMQvx8H1f9PTwKuKarfY9acVU961euToLU=
Subject key identifier: 1C:77:DD:9C:E9:67:5D:C6:92:D4:94:7F:17:23:92:13:4D:58:95:62
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer: /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial: 0197B933D88DF6652CB5B1E7C7EADFCE6147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number: 0492
Signing time: Sun 29 Jun 2025 01:01:12 +0000
Manifest this update: Sun 29 Jun 2025 01:01:12 +0000
Manifest next update: Mon 30 Jun 2025 01:01:12 +0000
Files and hashes: 1: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: HE1E885rhELHoQtdfEuj8U0E/jhf1+TggmumtLJHjhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:d8:8d:f6:65:2c:b5:b1:e7:c7:ea:df:ce:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Validity
Not Before: Jun 29 01:01:12 2025 GMT
Not After : Jun 30 01:01:12 2025 GMT
Subject: CN=1c77dd9ce9675dc692d4947f172392134d589562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:a8:13:7c:41:49:d5:f2:e7:06:67:6e:69:
bc:72:6a:f6:71:5a:23:85:23:93:23:d8:7c:46:79:
19:ef:02:e8:f9:5c:e1:4e:93:9e:65:5b:6a:04:d6:
1e:61:03:10:84:0d:b5:6f:f4:93:38:72:11:19:80:
2c:8d:c8:51:d2:fd:d0:91:48:ce:36:81:a7:b0:4b:
3f:02:7d:fc:31:fa:f2:35:dc:75:ff:23:cc:01:ba:
53:56:1c:70:97:fd:50:3f:60:e3:c3:38:ce:31:66:
56:f2:de:58:f7:2f:30:0c:d5:88:29:d1:a2:3f:38:
13:77:f3:d9:62:bf:4a:57:49:3c:2f:16:ad:82:b1:
4a:38:1b:ab:19:30:96:e0:72:7a:18:ef:e5:f2:79:
19:8c:af:f5:b1:1a:b3:91:93:88:ca:cc:4b:ce:4a:
c5:c2:9a:f7:91:42:5d:fe:7f:bb:a8:c6:a1:b7:77:
0d:84:56:0d:95:1a:30:21:24:9d:e1:0c:57:3f:d1:
ea:22:e8:60:79:60:10:89:f9:4f:38:ef:cb:74:61:
53:63:91:94:da:fe:a4:17:fe:45:1e:c7:d1:1c:33:
e9:af:7d:84:3d:72:b1:6f:2d:68:a6:bc:73:86:a8:
28:e8:cd:80:9a:57:c9:4a:41:e8:24:e3:b4:06:74:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:DD:9C:E9:67:5D:C6:92:D4:94:7F:17:23:92:13:4D:58:95:62
X509v3 Authority Key Identifier:
keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ed:a8:84:a2:29:2d:c4:9c:72:17:21:9e:30:7c:1a:20:e7:
90:c4:4d:88:97:0a:10:18:e3:c5:2d:e9:a6:4c:95:be:6c:db:
7a:73:86:44:34:71:cb:e7:ed:b6:46:33:9b:71:fb:5a:ab:b2:
7b:8f:b5:3c:6c:88:e8:97:08:04:bc:e7:8a:e6:97:9a:34:35:
45:48:1f:11:76:eb:7b:bb:0c:14:ee:19:ad:61:42:13:7f:0d:
f4:d1:74:76:34:79:df:89:df:1d:d4:28:40:27:4e:f3:d3:9e:
7d:52:5e:a1:11:20:9c:ba:41:1c:7a:95:cc:02:26:85:42:4c:
b9:d6:2a:d0:85:9a:49:d3:f4:07:e3:98:18:e8:d5:54:5f:2f:
a4:4b:cd:fc:a6:b9:b9:ef:36:a6:80:fc:02:2b:5c:d9:41:4b:
6b:fb:4e:bd:96:4f:a5:79:a8:44:3b:59:e6:02:a7:d5:e3:5c:
9c:d5:32:ac:fd:66:ca:6f:d0:a5:2b:e0:c1:6d:e5:87:3e:83:
0a:7b:98:a8:2e:08:18:db:64:c1:5d:0c:65:43:97:8e:8e:49:
0d:a2:8f:4b:a3:f4:6c:ef:b4:97:01:a8:cb:b1:a4:d5:4a:4a:
4b:f8:9f:39:2f:c3:d9:e1:27:4b:f6:b0:87:4b:b7:02:04:a8:
40:18:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:12:08 2025 by rpki-client