Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: OarQ2dS/rUyIY0xnI8ilVEDixCPyIsdyxvdHFO4vjrw=
Subject key identifier: C4:55:1E:BE:DC:43:2D:A2:6D:A3:7B:9E:48:3E:4E:27:8E:83:7B:A8
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 0197B6A17952026F2D31B9527CE1BB86F970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0A43
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: C0xOa3PV8QP3o7WhiBmMgnqhtyRBnRMpMtbok+d3bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:79:52:02:6f:2d:31:b9:52:7c:e1:bb:86:f9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=c4551ebedc432da26da37b9e483e4e278e837ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:ba:8d:96:76:41:7a:6b:df:eb:5b:de:4f:
57:54:c6:bf:e0:91:fb:82:23:e9:62:b4:9e:93:bc:
39:4e:76:ca:97:67:d1:ca:09:7a:fe:e3:e9:6d:a8:
22:0a:2d:17:1e:8d:b8:54:a4:85:18:fd:f6:e4:e7:
b9:19:3b:5a:16:81:6f:96:ea:10:27:e3:92:94:a4:
00:61:60:56:45:b6:6d:31:d3:6a:d7:67:1c:8a:0d:
c3:81:00:76:1f:07:29:72:db:ff:27:dd:51:e1:69:
e0:ce:c8:c5:7f:16:a6:87:62:82:de:dc:33:b8:65:
da:dc:a6:06:e9:85:4f:83:85:70:08:28:02:43:e3:
11:2e:c9:91:50:3c:51:8f:7b:c9:b5:47:3c:8f:f0:
05:3b:28:ab:95:ab:be:9c:3f:61:b9:f9:52:fd:fd:
28:81:13:78:e6:a8:0a:cb:a0:e8:46:e3:df:f8:d7:
52:d6:58:a3:3b:fa:97:e6:73:8d:46:fd:b7:c3:c7:
d5:f0:88:af:a2:b1:94:d1:cb:e4:d3:44:f4:88:bc:
69:7d:4b:4f:13:9e:8f:9d:4e:a8:12:91:46:8a:0b:
2d:35:b6:75:90:83:7a:02:cf:1c:bf:bc:59:e5:38:
79:97:2b:fc:e0:6b:47:7f:7b:7c:8d:58:bb:cd:d3:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:1E:BE:DC:43:2D:A2:6D:A3:7B:9E:48:3E:4E:27:8E:83:7B:A8
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:e0:ec:ec:02:1c:7b:59:d4:94:12:7a:1c:3e:23:f4:1c:
27:65:73:21:75:a5:9c:61:f6:b1:9a:82:de:2f:58:24:6e:23:
19:bf:05:c6:58:98:90:e6:07:2c:15:cb:e9:79:b9:13:fb:e0:
be:f5:60:d5:7e:21:0a:f0:56:42:10:5f:b8:65:7d:f9:18:c2:
33:6c:1d:29:eb:e7:55:b4:9c:e9:dd:74:79:c9:17:92:99:7b:
1d:15:ae:41:05:40:f3:ea:de:dd:f4:67:8d:06:94:7b:2d:bd:
6c:5c:83:7b:72:20:a7:24:66:5d:bc:54:7a:6c:e6:07:b1:a9:
27:ae:5c:41:18:97:0d:9b:ac:d4:79:47:78:b5:82:08:25:89:
2c:d5:d1:0c:73:1c:15:66:e9:0b:a9:7f:6d:f2:c0:7d:4a:b3:
15:3e:ae:8a:3f:43:6f:e7:4b:28:9e:d6:0c:a7:56:e2:da:e8:
79:1b:06:9c:d3:90:83:6a:52:34:ca:70:42:c6:06:7a:cf:be:
2b:f7:d6:b7:e5:64:00:12:3f:ce:3c:70:ac:62:04:60:f5:f8:
f6:70:8b:8c:f0:bd:12:27:b8:20:16:5b:bf:09:f8:4d:de:af:
86:6a:f8:12:02:be:75:09:04:a9:f2:b8:b2:64:8d:0b:ba:00:
90:0a:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:52 2025 by rpki-client