Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File: rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier: zursrsvzi6Dt9vBwSMt/WRr5syZAIlM/nTTIFiPWokA=
Subject key identifier: B3:F8:8F:58:4F:F9:33:E4:07:B3:93:71:D7:A3:CC:5D:86:D5:5D:3E
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer: /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial: 0197B77CB5B4E8EFFCC64BA07D86D7B72D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number: 1246
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: fP0+BvRuiPczYkYvzvNyMImGNv96QVKerr9CpVkKS0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b5:b4:e8:ef:fc:c6:4b:a0:7d:86:d7:b7:2d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=b3f88f584ff933e407b39371d7a3cc5d86d55d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:ae:62:37:5a:ec:8b:da:d3:0f:f2:3b:4b:
46:c3:f1:82:58:fc:4a:cc:48:46:95:d2:67:5f:56:
cd:e0:b3:1c:f3:e4:57:eb:21:ab:22:e7:ac:4c:5c:
d9:c9:fd:89:8e:0c:6d:ee:70:91:21:d3:76:03:b0:
cc:99:90:58:3e:d1:d3:01:5d:06:23:e3:e5:c1:35:
1b:43:fc:08:91:3c:8c:08:5e:f1:78:ed:09:47:cf:
2d:d6:28:0e:79:84:2a:aa:19:d3:3c:ca:48:ab:78:
e2:e6:84:ad:7b:7d:99:af:6f:b7:7c:88:1a:c5:d6:
3a:f6:95:6b:d9:55:c1:b0:01:84:40:5c:93:60:a2:
cf:4d:5f:cd:eb:b8:3d:6e:ef:5b:1f:6b:36:2a:32:
14:64:e7:a2:06:4d:19:79:0c:53:f9:44:57:7d:94:
19:85:98:12:22:97:bd:67:c5:ba:83:c7:a9:8e:db:
c6:08:bf:91:a2:b4:29:b2:52:7b:21:b0:0f:e2:e0:
f5:06:d2:99:51:89:9e:3f:21:41:6c:e1:a9:43:1c:
ce:52:d8:1c:15:8c:46:ef:de:75:ed:b5:40:c2:f3:
4b:b4:d0:07:51:b8:b5:59:ca:70:ef:9c:0b:a3:e4:
93:76:3b:ca:b0:21:05:72:c1:8e:86:e7:cc:ba:28:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:8F:58:4F:F9:33:E4:07:B3:93:71:D7:A3:CC:5D:86:D5:5D:3E
X509v3 Authority Key Identifier:
keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:7c:2e:30:96:d9:cd:77:b1:b5:2a:01:c5:a3:ad:df:39:
8d:ea:f4:26:6c:e0:8c:44:3a:66:91:e0:b0:7e:40:19:ca:54:
74:50:9c:4e:b7:92:ac:f8:2e:f1:57:41:e2:61:b4:53:ce:e6:
94:53:c1:f8:09:9b:53:d9:44:a1:f3:71:c6:c7:02:4c:96:42:
98:e0:78:ef:35:8b:17:12:fd:6d:c3:81:2d:e6:86:8d:05:ba:
13:94:c5:5c:96:a8:85:26:86:a3:28:5f:ce:e4:2a:36:df:f5:
5d:06:0b:85:d0:5b:17:42:15:d1:22:b7:c4:10:4f:65:b7:f6:
48:ae:02:43:fb:45:70:b7:b2:c1:a6:7a:dd:49:b4:1e:ae:3a:
69:b5:b7:01:e8:47:7d:41:4b:69:50:45:68:5a:46:30:7c:99:
dd:9a:93:bf:cb:14:d9:a0:a0:bd:92:64:b3:80:18:0f:7e:6a:
53:5b:38:b8:b9:bf:8f:be:a6:56:29:d7:36:a8:17:f5:68:0c:
7f:9e:c5:75:48:4f:a7:ce:3d:fd:c4:e6:16:4e:46:0c:b3:cc:
3d:c5:89:8b:03:c0:36:a5:2b:d8:30:6d:19:6f:03:47:a4:ec:
86:9b:cd:67:e1:a4:98:f8:2e:2e:2b:4e:04:65:c7:8c:5f:2a:
88:4f:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:04 2025 by rpki-client