Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: oWl5rYrsAEEZm8sYeGjh8gHDHqbZSdiXWXiM+S9uJOw=
Subject key identifier: F5:69:57:1E:54:0D:D8:45:1D:F6:97:C1:DC:C7:4E:BA:5F:1D:A5:F1
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 0197CA5E8F64A6DD4D9FD22AC1E44533C269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 131E
Signing time: Wed 02 Jul 2025 09:01:24 +0000
Manifest this update: Wed 02 Jul 2025 09:01:24 +0000
Manifest next update: Thu 03 Jul 2025 09:01:24 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: 8qC7XN2RSpqhqcY1v4KzmRCaArX5CkwM01eTdihe6Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:8f:64:a6:dd:4d:9f:d2:2a:c1:e4:45:33:c2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Jul 2 09:01:24 2025 GMT
Not After : Jul 3 09:01:24 2025 GMT
Subject: CN=f569571e540dd8451df697c1dcc74eba5f1da5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:8f:59:d5:2c:9f:b1:ae:99:fc:08:bd:4e:
a7:02:c3:c1:40:ec:56:27:2b:85:9c:ac:ee:3b:b6:
a4:07:22:6c:1d:94:b5:12:d0:82:6c:95:1e:23:06:
a6:d5:94:86:07:a4:65:a3:c6:b1:77:f2:23:f5:ca:
02:91:84:4e:86:99:43:97:f9:2e:ab:b3:68:51:82:
df:a6:4a:ca:f6:2e:14:68:c5:ed:92:87:19:ab:42:
6d:f1:f2:5a:2c:b0:b6:47:94:c3:0f:7f:98:3c:69:
70:c6:bc:e4:d4:bb:80:bf:05:6c:e1:aa:71:3a:df:
62:2a:f2:96:de:08:f7:17:be:ab:55:4b:ae:ee:b4:
e6:26:bb:07:dc:84:fd:9a:e1:9e:a4:3f:c3:76:f5:
63:c2:2c:e1:8f:43:46:ba:4e:51:cc:c9:48:8e:82:
bb:4d:2f:19:0d:24:e0:4b:be:2a:68:6a:a5:7f:a3:
cc:6c:58:63:f6:8f:ad:6e:ac:8b:08:0c:74:a1:d9:
56:fe:0b:b6:2b:02:41:83:6f:3e:16:0e:c0:9f:de:
3c:59:a4:4a:0f:f8:a7:d5:1d:fc:80:f7:cb:78:1f:
38:49:52:6d:80:3a:ed:cb:5e:35:a7:7f:d6:7c:23:
ff:e7:37:ff:b2:f5:28:34:a2:09:3e:6c:be:bf:f2:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:69:57:1E:54:0D:D8:45:1D:F6:97:C1:DC:C7:4E:BA:5F:1D:A5:F1
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bf:59:ce:55:da:8b:9c:38:7b:43:77:e4:da:5f:fb:df:8c:
d4:5e:92:e1:e7:8d:bf:5e:dd:f8:92:02:ac:9e:ed:f1:a3:4c:
33:74:6c:f4:7d:6c:c9:e9:14:24:43:a5:52:99:8e:2d:4b:e9:
0a:3a:30:74:82:50:81:ee:3a:42:fb:9b:25:4e:4d:8f:cd:f5:
33:3c:db:59:89:5b:4d:9d:eb:36:06:e4:f2:35:d1:93:7e:66:
3f:52:6f:34:b5:ce:99:78:a5:50:97:60:0f:6b:c3:a0:bc:df:
9f:3d:78:6d:05:d4:04:70:fd:a5:7a:d2:e3:74:e1:a4:c8:76:
79:bc:35:ab:4b:9f:f7:34:23:c5:22:21:0c:20:6d:87:db:80:
c7:57:ab:bf:40:b7:60:77:94:43:0e:c9:7b:26:ee:87:94:96:
aa:4f:cc:95:42:8d:ff:5e:92:e3:25:e2:fe:f9:ba:50:a0:0e:
09:43:7c:f1:04:59:3e:2e:fc:c9:76:9a:5e:29:1d:6d:d3:41:
cf:d4:e8:63:34:88:2e:9e:e1:1b:25:b7:49:3a:7b:b7:88:b2:
4a:58:3d:b5:b1:28:56:09:76:10:3b:78:bb:c5:70:c6:d4:5f:
a2:9b:b2:1e:14:52:7d:54:8b:03:8f:39:b4:8c:42:9a:80:31:
03:14:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:40:25 2025 by rpki-client