Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: 2hvUZhiDM99/BcTfRjz/oM21Vha+0bYPtEohSlm+XN0=
Subject key identifier: 8B:44:5B:DF:73:74:71:E8:D5:9B:80:7B:F2:3C:8D:8E:72:5F:61:33
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 0197B74585183ACF12155BD7FD41194DDEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 116B
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: uJTPA7R0uqOKqElBT4hTxebrQ7O0Ne/Zhupoa6FL3+I=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:85:18:3a:cf:12:15:5b:d7:fd:41:19:4d:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=8b445bdf737471e8d59b807bf23c8d8e725f6133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:94:f1:4a:49:31:39:62:e9:78:dd:52:5c:
01:3e:c3:15:1f:9d:c6:0c:13:ee:03:2f:6e:92:62:
5b:8a:1f:b2:51:3b:d4:32:07:19:5f:1c:67:a6:da:
06:9c:d2:a7:50:ed:72:00:97:0f:02:2d:83:c1:be:
59:73:f0:a5:7e:46:f4:98:b8:f9:fa:0c:88:e2:e8:
fb:75:4c:75:bd:eb:e9:de:4f:28:1f:4d:4d:73:12:
de:9f:07:21:a6:ab:14:a2:70:90:d6:c4:fb:a8:cd:
72:e8:ba:fd:2b:01:73:d0:01:41:fd:35:40:bc:90:
7c:e3:d7:76:97:c4:6c:3e:ef:c8:20:84:6c:1e:11:
5c:73:46:4b:9e:6b:f0:a6:1c:fd:04:9a:84:d7:75:
49:e6:ad:7d:ea:dd:b8:81:e2:0d:e2:1e:60:f5:13:
1f:67:45:a3:73:d6:19:f1:12:b0:d0:82:e5:79:54:
d0:b3:20:7e:af:69:78:19:5e:14:36:a8:22:06:46:
0a:17:44:dd:13:d2:d0:8b:02:7d:74:13:1b:4b:45:
8b:9b:b8:ac:15:a6:87:a3:33:40:75:09:ac:b1:3f:
5f:81:7e:ad:67:88:38:b8:ae:09:40:b0:9a:96:81:
55:17:8c:67:d2:74:f9:b4:64:a8:b4:bf:2a:b4:e6:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:5B:DF:73:74:71:E8:D5:9B:80:7B:F2:3C:8D:8E:72:5F:61:33
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:de:3b:03:6b:28:c4:3d:24:7a:c4:99:88:b4:a9:10:78:
65:89:29:52:51:fb:4d:1c:19:c6:e3:30:c9:5e:0d:2c:fb:13:
37:31:71:1d:1c:3c:65:cf:6a:f3:43:d7:51:07:fb:5c:e4:88:
51:6c:2e:02:53:fa:c7:49:1f:ca:2f:9d:32:31:f3:23:21:2e:
c6:88:35:47:57:31:7b:33:a1:1a:b1:97:db:72:c4:64:a7:fb:
d2:0f:6c:69:a0:9e:f1:60:fa:c1:7c:6e:21:b3:d7:42:18:85:
79:70:33:57:d7:a6:e5:59:0d:bb:90:f8:a7:90:31:9d:2d:56:
34:3a:70:77:5d:b9:11:9f:5a:d8:18:fa:05:74:54:30:25:4c:
6e:bf:bf:87:c4:85:ae:75:b5:a1:06:76:4c:a8:4c:45:b2:8a:
cb:11:da:c8:08:0a:26:28:57:04:4c:b3:0b:33:84:0f:15:12:
cf:28:c5:54:08:f5:0b:0f:55:02:3a:37:9a:ff:ff:5b:ed:f2:
1b:a2:08:95:68:3a:a8:8f:09:cf:91:7e:13:b4:b9:f0:55:9b:
c9:fa:32:ec:bd:f2:09:ae:c9:5b:36:be:a5:86:88:ae:64:6d:
9d:43:37:92:69:17:aa:e3:e9:37:c6:d4:93:ec:99:1b:a8:65:
47:4f:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:35 2025 by rpki-client