Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: 4mG0GKqVYzCRQaKktfWL8sm8uOXYYMQTt4p0aJryXVQ=
Subject key identifier: 95:CE:D8:75:18:F7:F4:A4:AC:78:15:87:27:BE:9B:34:33:2A:25:EC
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 01974E5762FE75A67BB11AD4853733FC47A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 07:00:39 +0000
Manifest this update: Sun 08 Jun 2025 07:00:39 +0000
Manifest next update: Mon 09 Jun 2025 07:00:39 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: 2PGjWeMIZKPzy1RCMzuxaFQAmt/ef66IU2b7OgI5Sb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:62:fe:75:a6:7b:b1:1a:d4:85:37:33:fc:47:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Jun 8 07:00:39 2025 GMT
Not After : Jun 9 07:00:39 2025 GMT
Subject: CN=95ced87518f7f4a4ac78158727be9b34332a25ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:d0:89:18:a3:45:d6:0d:12:93:7b:86:98:
36:91:6c:e8:27:d0:13:69:07:a7:fb:b8:10:cd:d2:
8a:49:26:db:93:bd:7a:b2:37:d4:3c:c1:31:cd:63:
8c:62:43:87:c5:02:44:8a:39:34:6a:1b:3a:fd:3f:
14:85:c7:be:06:81:98:c9:0b:6e:45:bb:85:c7:c3:
db:4d:b8:72:9f:27:c9:dd:61:ef:95:1d:21:60:2f:
46:58:ed:15:9f:ff:ca:01:47:b4:2e:ff:cc:11:49:
86:60:14:55:fa:4c:e5:0c:72:32:54:74:59:18:52:
90:09:df:f3:9b:e3:a5:d0:8b:9b:21:7f:b6:29:70:
6a:0e:61:bf:e0:f3:a9:af:a0:ff:34:e3:27:91:e0:
b5:ad:6f:eb:68:5f:a9:13:8f:bc:dc:fe:eb:2b:20:
65:71:2d:6b:9e:de:78:8d:81:66:f8:4e:92:57:63:
b4:8d:56:78:38:38:59:df:7a:1e:7e:6b:bb:2b:2c:
71:cc:48:f5:aa:5b:05:ce:3f:35:3a:3f:2a:c6:19:
f6:6f:fe:f5:01:5a:7c:3b:12:45:fd:7f:fb:dd:d8:
10:b0:60:97:a1:5a:5c:26:a3:ed:fb:56:c5:66:1e:
97:fe:a8:cb:b4:8b:03:ff:55:0c:dd:e4:47:57:8c:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:D8:75:18:F7:F4:A4:AC:78:15:87:27:BE:9B:34:33:2A:25:EC
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:39:23:20:3e:fc:d6:71:bf:13:25:7d:68:a2:3a:c0:cb:37:
cc:cc:ee:6f:97:97:75:aa:57:76:cd:df:a1:49:30:5b:00:97:
d9:00:fd:cc:64:1a:7d:ee:4d:21:b5:bb:ac:46:01:7d:cd:47:
1b:12:79:63:ec:85:dc:04:7a:bf:fa:4b:1f:fb:4f:bb:46:6d:
8f:a7:b4:26:4c:9b:1b:1b:35:f7:b4:71:cb:79:14:7f:b0:02:
6f:96:24:72:61:f7:f5:f4:3c:4a:86:37:4b:1e:84:3b:75:d2:
cd:b3:96:b6:cf:bf:11:6a:a5:b7:2f:37:e9:79:f8:b4:50:19:
52:6b:66:18:01:a5:d6:05:c7:55:4e:73:e5:20:6e:a7:f2:51:
37:36:56:de:14:43:f0:dc:fb:30:09:46:8d:75:f8:3b:25:af:
16:34:91:5f:92:5d:66:94:21:ad:3c:83:ea:8e:c8:a2:ee:7a:
04:76:95:de:c4:5d:34:11:bb:c3:44:e4:2c:4b:8f:14:ae:6b:
d4:a9:28:10:fe:85:f7:f7:6b:51:68:c9:4d:b5:56:4b:84:06:
55:cc:a5:97:30:20:19:76:85:49:ab:69:bd:f1:aa:58:35:9d:
fb:f2:96:7c:7e:48:5d:ea:1e:5c:e4:42:b2:d7:42:fe:5a:ff:
85:84:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:46:13 2025 by rpki-client