Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: vChAPZn5HVxYdLpGlG5g/5tOt15VvfZJ3uJ21tCaPZU=
Subject key identifier: E8:D5:9D:1F:5E:CD:17:B6:70:60:1B:E4:16:45:0F:7A:75:A8:16:7A
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 0197B70EB8A311974449D25F88FDB2D4D91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 0F31
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: EufrYYYaWkDtiTRK5yHYG/GCLktizTguW/x65ikQayY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:a3:11:97:44:49:d2:5f:88:fd:b2:d4:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=e8d59d1f5ecd17b670601be416450f7a75a8167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:4c:43:a1:2b:12:20:aa:c9:b6:18:c9:fa:
50:ab:b1:63:9e:a5:15:99:a8:da:d3:a4:1c:15:9c:
fd:2a:68:15:39:a2:59:51:03:b2:ad:b5:1f:f3:68:
34:ac:fb:c4:05:61:ff:76:11:91:91:26:69:a4:7b:
b3:1d:63:59:41:8d:c6:b4:a1:59:fd:de:c1:b2:a8:
38:30:d7:e8:bb:3f:3e:80:19:38:3a:78:e6:84:06:
59:38:a8:03:8a:c9:00:c9:51:98:44:d2:98:5a:1f:
2f:88:72:08:95:2e:70:a8:d1:e6:78:59:ff:69:57:
21:8f:ca:7d:f1:06:f5:33:6f:3d:30:31:b3:b3:ce:
80:b4:56:ba:b1:e2:2c:ca:a8:6f:7e:00:3c:b6:75:
dd:79:6b:26:a6:db:38:70:12:2e:8e:64:c9:cc:1e:
2a:b5:42:a2:7d:fb:c9:32:ee:86:57:4f:b4:7b:51:
42:b4:c3:7b:b3:10:eb:0b:af:f0:2a:18:20:53:f8:
51:5d:5b:83:97:fd:f5:eb:04:3d:cf:b5:e7:02:d7:
7f:f5:c2:44:45:71:ee:63:b6:f4:b6:b2:ed:65:48:
10:24:76:70:f5:30:89:d9:e7:12:f5:ed:9e:96:51:
f2:21:33:09:af:d2:7e:f3:f4:f9:56:ef:ba:53:27:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:9D:1F:5E:CD:17:B6:70:60:1B:E4:16:45:0F:7A:75:A8:16:7A
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:21:f1:db:fb:f0:03:82:5d:98:5d:2f:62:41:39:9d:41:b5:
df:a1:e6:d1:7e:83:09:5e:7a:45:7e:2a:45:fc:d8:7f:ef:df:
32:90:93:f7:37:da:27:ba:da:40:e8:8f:68:f5:76:b2:18:f3:
c2:a6:42:22:9e:27:1a:d6:53:b6:5e:fc:f4:3a:b7:75:98:1d:
81:50:fd:ac:e7:7b:5a:62:4b:9c:3b:5a:04:f1:11:d7:f5:ef:
ea:dc:25:b3:b7:8d:af:9a:ae:82:fe:7b:f4:7f:1f:4f:3d:f9:
43:eb:6a:32:a7:ac:c8:68:aa:03:0b:04:10:c1:26:5c:22:cf:
18:f2:63:d4:94:34:e3:53:1e:47:ab:7a:a1:f0:d6:03:63:7b:
8c:e3:23:53:be:52:3b:72:2e:fe:67:82:ae:60:f5:1e:6c:d1:
56:77:7a:a3:68:8a:e3:d4:1e:27:a5:34:88:f3:ad:47:e2:e9:
a5:d9:f0:34:d9:59:d2:c3:3c:cf:cb:0b:e3:28:27:9d:e4:23:
56:d1:82:c5:f5:3e:b7:9c:2c:17:67:8f:d3:1a:e8:d3:a3:fb:
36:43:a5:bd:10:6d:2a:b3:6e:ed:0a:8b:5f:d9:18:ad:34:91:
f5:42:a3:5a:f6:92:2a:46:70:57:e4:cb:c9:0c:bf:3c:ea:23:
e1:ed:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:50 2025 by rpki-client