Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File: d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier: K86WuzJ6u69cJ/WplZHDGkF8Kv+z9eXpGNlmtBoHTrk=
Subject key identifier: 4A:FB:89:C4:92:05:E9:59:13:A1:28:67:61:05:58:E8:9C:BF:CA:E5
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer: /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial: 0197B88F6BB7C9B9B724FD72FE6D1A947156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:36 +0000
Manifest this update: Sat 28 Jun 2025 22:01:36 +0000
Manifest next update: Sun 29 Jun 2025 22:01:36 +0000
Files and hashes: 1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: Nr7/scVW3rLuHqQojC0552tDvI7qNkZWvbbciei16OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:6b:b7:c9:b9:b7:24:fd:72:fe:6d:1a:94:71:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Validity
Not Before: Jun 28 22:01:36 2025 GMT
Not After : Jun 29 22:01:36 2025 GMT
Subject: CN=4afb89c49205e95913a12867610558e89cbfcae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:59:d6:43:f2:85:f5:b8:22:0f:67:ad:86:
3a:c3:00:bf:61:b9:0e:5b:60:94:63:86:57:13:62:
6e:cb:3f:ae:38:98:ef:9e:66:b9:b3:ff:a1:af:88:
39:7e:db:96:16:e0:df:68:47:18:b6:58:e6:c9:59:
17:bc:07:bf:1a:45:e0:6e:ac:5b:45:ad:f6:da:5d:
04:7b:9e:36:41:25:35:e7:4f:fa:39:5a:f8:c3:53:
3d:5b:76:20:e0:30:60:2b:58:9c:9b:a0:13:aa:15:
01:ae:ad:2e:d4:5e:f7:fe:00:d9:df:00:72:98:1c:
8a:f1:09:79:bc:3f:36:c3:0f:6e:6b:9c:35:6d:a0:
bf:1a:ba:f3:dc:ac:04:a0:6a:15:ae:09:b0:77:2e:
ed:3e:8e:67:55:93:43:bc:bd:ea:14:18:2b:d6:b8:
02:a7:16:71:3c:be:26:89:e9:8f:70:eb:e1:9a:08:
7d:76:62:8a:c1:b8:3e:a6:68:86:5f:f3:f2:d9:82:
b3:be:4a:cc:90:ad:56:1f:1c:16:bc:73:fe:60:9e:
76:68:ef:26:c1:10:08:60:c3:f9:e2:2f:f1:cb:6a:
cd:80:89:fc:3e:cb:9b:2e:de:e3:c4:45:b3:45:cf:
11:42:c0:f0:bd:23:14:73:eb:4f:31:17:e4:6b:d5:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:89:C4:92:05:E9:59:13:A1:28:67:61:05:58:E8:9C:BF:CA:E5
X509v3 Authority Key Identifier:
keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5d:05:ad:06:f8:25:7f:05:76:1b:8a:52:db:93:58:46:eb:
30:0e:ee:9b:d4:11:62:81:5c:59:9c:b5:d3:1a:ab:a8:e7:11:
0e:d7:a1:33:d7:bc:42:8f:99:c4:a8:9a:ac:0f:97:c2:3e:0f:
71:3f:97:e2:e7:0f:9c:d7:5a:c7:d8:aa:63:97:0d:b6:f4:24:
4c:b7:80:62:ad:66:d5:71:9a:9f:6d:c1:84:53:bd:4b:b4:b6:
fc:df:6e:1a:6e:dc:57:59:e8:c3:67:68:68:d4:12:42:b1:4d:
f5:3c:ab:9d:c0:b3:6e:3e:05:00:57:1a:08:1d:49:20:85:1d:
29:ac:58:e4:38:9a:78:13:71:58:e1:4f:8c:e9:62:de:cc:74:
e1:bc:a7:f6:9e:1c:ae:a5:54:b2:ab:a7:77:12:f2:e3:0e:3f:
53:73:4b:dc:99:12:2f:a9:22:63:d0:85:74:53:cb:89:a0:51:
ba:29:0d:60:8a:e6:c3:58:48:f0:6e:bd:53:6f:5b:66:68:29:
3b:9f:7e:d6:1b:c2:29:3a:05:9d:7f:ec:b3:1d:c5:22:48:ab:
ad:10:cf:48:c8:84:4a:3c:38:1d:fe:96:ac:ac:e5:a7:f4:a8:
e0:f0:2f:2a:63:75:4f:46:62:f6:5a:d8:16:a0:f1:f2:2b:bf:
69:f4:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:27 2025 by rpki-client