Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: abyO1FlKT265CzN+EWYBtHrZ0WLvVpmfx5LtJGaWG3o=
Subject key identifier: F1:95:85:BB:C7:61:87:00:C4:6D:2C:D0:BC:CF:87:14:ED:B6:35:82
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 0197BC6C2C2800EEA0129BC6BF90BB61FB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0A86
Signing time: Sun 29 Jun 2025 16:01:35 +0000
Manifest this update: Sun 29 Jun 2025 16:01:35 +0000
Manifest next update: Mon 30 Jun 2025 16:01:35 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: clS/NzxD/sRUqksdvfQdkBo3WXbdMiN3Ecu/He9TfSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6c:2c:28:00:ee:a0:12:9b:c6:bf:90:bb:61:fb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Jun 29 16:01:35 2025 GMT
Not After : Jun 30 16:01:35 2025 GMT
Subject: CN=f19585bbc7618700c46d2cd0bccf8714edb63582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:e8:9a:00:d6:df:4d:b2:23:9e:90:52:47:
69:0e:2c:3d:d1:35:dc:70:e0:14:5a:a9:e8:59:03:
28:37:fd:f5:45:cd:a0:b9:d9:be:f5:1e:07:40:1b:
1d:a7:b9:53:14:01:57:69:f6:33:44:6a:a9:b0:b1:
b3:2c:0f:a8:f6:dd:71:ce:1c:b1:f9:4e:8a:68:e5:
c0:9d:54:fa:09:dc:e5:2b:08:8c:f4:cd:89:da:7e:
e0:a6:e1:45:fd:b3:2e:61:eb:0d:40:2e:ca:00:42:
89:3b:ee:09:f5:c9:2a:58:5f:27:fc:7b:9f:39:1a:
b7:ec:dc:2f:f2:e8:56:fd:0e:1d:16:16:9d:fb:e2:
4a:46:9d:6a:b3:09:08:8b:33:0d:32:04:d0:75:b8:
87:fb:75:2d:45:c2:67:ab:c4:ae:6d:85:a5:17:2b:
07:bd:e0:6a:f1:5f:e8:7c:cf:13:05:48:14:a9:4c:
7a:1d:45:be:50:95:a1:cd:59:ae:ea:76:51:17:84:
9f:cd:67:f8:71:4b:df:3c:d1:3e:24:47:a5:57:b3:
64:0d:72:ed:a7:d1:41:72:2f:57:a1:50:69:01:0f:
29:f9:ce:15:cc:33:b5:54:98:72:43:45:fb:33:9e:
40:8e:04:90:26:f0:72:8c:1a:55:ec:b6:0a:4e:d5:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:85:BB:C7:61:87:00:C4:6D:2C:D0:BC:CF:87:14:ED:B6:35:82
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:90:57:9c:30:39:dc:bb:9a:51:71:43:de:a7:5b:4f:96:
7c:b0:2b:3d:b0:da:46:5d:19:a6:ad:bc:6e:6b:48:8d:eb:1e:
16:79:5d:4c:4e:2e:44:15:35:1b:4c:4a:e3:a8:7c:56:97:53:
3c:7b:90:7e:1b:22:f6:45:05:5a:18:9b:b6:7d:db:a3:e5:61:
90:0a:6a:84:40:98:80:79:39:50:90:b2:0e:7d:80:05:96:bf:
50:5e:2d:07:27:78:8c:d4:69:df:6d:f2:08:81:69:d9:32:c4:
46:f5:ab:32:d4:06:af:97:44:d4:9c:d8:1e:2e:5f:0e:1a:fb:
9a:8e:eb:31:d7:8c:90:e2:36:19:8a:0c:53:86:88:00:27:7f:
f9:70:d1:a3:97:61:6c:75:d6:39:98:9e:8a:1b:ae:af:66:f3:
0d:b2:23:22:55:28:d5:bd:4f:5b:b2:ee:b9:bb:96:34:97:47:
c3:a3:d2:a4:09:a4:47:22:df:b6:85:7b:23:48:c7:f8:c6:7d:
15:1b:ba:3e:fe:bf:ad:1e:fa:dd:d9:33:a6:c4:93:62:09:be:
21:41:67:c1:80:73:f6:7e:ea:28:5c:aa:11:36:d6:76:23:e3:
81:65:e4:b1:10:64:95:b4:d7:2e:ab:98:ad:a1:42:9e:bd:06:
aa:1c:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:08:07 2025 by rpki-client