Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: nv7sRrPeY/qGKS335/KE/mJGOK8jQmTaoLDjHlon/Xw=
Subject key identifier: 1F:00:40:B0:61:71:D9:61:86:95:A2:8F:5F:AB:61:1A:49:40:DE:D9
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 0197488D17B81C31050D0F92120B62295291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0768
Signing time: Sat 07 Jun 2025 04:01:35 +0000
Manifest this update: Sat 07 Jun 2025 04:01:35 +0000
Manifest next update: Sun 08 Jun 2025 04:01:35 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: UR5UgLMMYmWkUUdGFRe8O5EUhcwJPWlm33a7odmanMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:17:b8:1c:31:05:0d:0f:92:12:0b:62:29:52:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Jun 7 04:01:35 2025 GMT
Not After : Jun 8 04:01:35 2025 GMT
Subject: CN=1f0040b06171d9618695a28f5fab611a4940ded9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:45:66:bb:b4:fb:19:df:c5:b3:fb:be:22:
e4:d7:55:4e:c1:31:96:cb:e0:51:05:c9:bf:93:d5:
7f:64:1f:3a:02:5e:cc:2b:4a:7a:93:2b:fc:9d:c0:
85:ed:91:83:15:74:d1:52:77:a6:95:00:b5:f1:63:
eb:a6:82:21:42:22:a6:58:a6:7a:cd:44:da:bc:f4:
f6:ab:33:27:39:c1:a5:89:a0:18:8b:43:54:6b:f1:
1a:36:b8:55:32:97:51:d1:8e:16:e1:f4:05:6a:28:
6b:20:dd:ce:09:a7:45:6a:a3:2d:d5:66:87:78:83:
af:90:56:c7:a6:78:e5:8f:3d:15:d3:69:24:9c:eb:
96:a6:75:d1:cc:3b:03:23:e5:6f:af:53:70:69:85:
de:0d:a4:95:db:9a:f0:ac:09:16:0f:07:6e:16:0e:
16:5f:2d:e2:8d:9b:08:d9:f1:d1:6a:2c:71:5f:d0:
65:93:17:6c:4a:63:e1:83:6a:7e:17:18:5c:a1:56:
0e:8f:75:c0:30:53:5b:5e:56:99:f6:a3:d8:3a:a1:
b5:07:7f:10:e6:c1:61:fd:a0:08:9b:94:2a:63:b6:
2e:e8:eb:53:5c:ea:f1:f0:4a:a0:cd:f3:0d:28:cb:
27:4f:49:75:40:55:df:a2:27:a2:07:b9:ba:b4:49:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:40:B0:61:71:D9:61:86:95:A2:8F:5F:AB:61:1A:49:40:DE:D9
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a4:b8:19:b2:fc:22:82:72:8e:f3:8d:ed:ce:c6:d2:82:82:
09:42:b9:01:44:86:c7:ea:75:38:af:fb:3c:c4:b2:c3:d5:72:
6d:2e:61:ce:d4:3a:55:fc:7f:0c:fc:ac:aa:36:50:5c:0c:61:
0c:92:5b:b0:ac:25:d4:c2:56:9a:66:49:e9:08:13:71:b5:3f:
f5:ba:12:79:d0:a3:26:b8:0b:5a:06:21:56:62:d1:05:c6:0b:
8f:69:33:e0:2e:d2:24:b6:2f:86:a6:e0:4d:df:b0:c8:28:7f:
99:ec:30:1a:c3:a1:70:f9:3b:1b:3e:44:d5:18:e5:6a:ad:e4:
28:ca:4c:08:0a:26:01:ef:ad:e2:7e:3b:b7:1d:8e:6d:76:b6:
e6:9b:a0:3c:7b:4a:de:2c:35:63:02:e7:2d:27:db:f6:d5:c5:
14:a3:e5:e5:13:15:ad:d8:7c:48:ef:fa:64:2d:a5:de:fb:af:
e7:a3:9c:3c:be:f3:a6:c5:e1:81:fe:7c:06:e7:f5:1a:4f:57:
df:03:27:d8:ed:43:d6:e3:bf:60:ff:4f:a7:a0:e6:f8:1a:84:
0f:4f:3e:12:90:9c:34:1a:98:fb:09:74:4e:3f:7e:b9:fe:93:
c2:35:3a:79:78:4d:6e:8e:cd:d4:eb:a0:ec:4b:29:ad:a9:05:
c1:96:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:23 2025 by rpki-client