Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
File: RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft (raw, json)
Hash identifier: /BZMOj7fCPj3LrpzxarPna8LT3ULiEo6Be89bt2cJHs=
Subject key identifier: 06:9E:96:95:C6:B3:D4:A3:B1:80:A4:37:1D:65:78:DA:A6:A8:05:B9
Authority key identifier: 44:3D:4F:95:73:29:DF:31:49:8F:A8:54:3C:23:F1:2C:87:4C:C6:0D
Certificate issuer: /CN=443d4f957329df31498fa8543c23f12c874cc60d
Certificate serial: 0197B6A23034158F23A86233C57AAC06F281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD1PlXMp3zFJj6hUPCPxLIdMxg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
Manifest number: 21
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: RD1PlXMp3zFJj6hUPCPxLIdMxg0.crl (hash: laC9Ixh6/0K5tGwT4j6irU0SuIR0K7tTMFOCvCu7zoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD1PlXMp3zFJj6hUPCPxLIdMxg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:30:34:15:8f:23:a8:62:33:c5:7a:ac:06:f2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443d4f957329df31498fa8543c23f12c874cc60d
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=069e9695c6b3d4a3b180a4371d6578daa6a805b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:ed:78:ca:86:08:76:03:bf:0b:cd:3b:6e:
e8:9d:18:6f:7f:ad:19:fd:ba:6e:3b:e4:a4:52:9e:
25:6b:54:e6:c0:3a:99:d3:ad:bd:67:87:77:d8:a7:
e0:64:3c:97:71:e4:53:c3:a7:ce:6e:24:98:41:ef:
8c:c2:05:97:17:e2:85:4e:0f:43:ff:cf:98:a3:66:
39:d0:17:20:40:e4:fc:24:9f:7e:89:d7:ff:79:56:
c2:e0:86:1e:d9:6f:30:9a:76:65:85:25:7c:92:a5:
45:a2:64:d1:da:a0:9f:21:53:a7:e0:a6:1a:56:5e:
26:8e:51:f8:f3:fc:b9:9f:3c:6c:b1:65:b1:5c:54:
3d:b7:5b:fe:f7:57:8a:6a:48:9d:2e:71:8e:54:da:
e7:05:4b:27:c1:24:c4:5f:ee:f4:b2:e4:55:15:75:
af:37:a4:91:97:6a:42:ea:85:9a:58:70:0c:c8:ae:
90:db:c6:af:20:13:62:7c:d5:af:7f:00:64:82:0a:
c7:2a:e2:c6:f9:31:9f:bf:5e:91:e7:68:10:48:6e:
59:18:99:5a:d6:cd:c6:2c:90:73:6e:03:b0:d1:70:
d1:5d:57:9f:06:2f:46:bc:b6:e8:06:fd:28:e8:b2:
73:56:be:b6:e7:fa:a2:b0:de:e8:eb:78:b6:b6:ee:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:96:95:C6:B3:D4:A3:B1:80:A4:37:1D:65:78:DA:A6:A8:05:B9
X509v3 Authority Key Identifier:
keyid:44:3D:4F:95:73:29:DF:31:49:8F:A8:54:3C:23:F1:2C:87:4C:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD1PlXMp3zFJj6hUPCPxLIdMxg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/79dc3c-3633-4b47-9bd1-6e9b84b271e1/1/RD1PlXMp3zFJj6hUPCPxLIdMxg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:5d:6f:b7:2a:02:6a:33:3a:df:fb:33:1c:87:a8:07:b4:
d8:32:30:49:df:3a:14:e9:df:f3:de:ac:48:67:25:3a:e6:1b:
0f:f5:4d:01:81:6f:8e:45:15:9f:bd:0b:71:92:fc:3d:26:52:
96:c8:06:22:15:a9:ec:fb:75:9c:59:ac:18:e8:36:c0:8f:e7:
7f:2d:25:44:07:1d:ef:a4:fa:3a:7a:76:87:b5:59:93:c7:d3:
ad:8b:dc:02:d1:25:f1:17:7e:95:fb:e1:9a:5c:97:61:cf:76:
d1:8b:ca:74:df:07:2a:bf:d2:c3:4e:68:c2:73:06:f6:2b:d0:
f9:2d:3d:d3:65:ec:68:41:f4:9a:ee:2d:81:bb:f1:7b:b3:b2:
f3:00:7d:db:e4:1a:0d:39:96:d0:1d:42:21:48:13:85:da:4a:
4f:38:be:b7:82:ac:fc:ea:f8:72:6f:8d:8e:55:42:73:44:c3:
4b:8b:65:6c:6c:11:24:28:bf:ef:a6:0e:83:a3:85:ba:fa:84:
29:ad:c2:4b:7e:cb:a4:d1:68:e6:20:9e:c3:19:6e:25:67:a1:
8d:c7:99:87:bc:9f:86:8e:05:09:1a:45:f7:3d:f2:a5:9c:11:
5a:c6:da:d0:f0:44:ef:fc:48:fc:5a:39:17:52:7e:a5:66:87:
86:a1:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:39 2025 by rpki-client