Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier: 0o0CBq8ap5fGBMAJZsMF88o/PZLVN6g5Yx0t2liQApk=
Subject key identifier: BC:D8:05:8B:80:A6:83:F2:3D:00:60:E3:A7:7D:C0:6A:64:CA:64:49
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 01974DE9D9AF1A92091997AA82850B9E7A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number: 0E
Signing time: Sun 08 Jun 2025 05:01:00 +0000
Manifest this update: Sun 08 Jun 2025 05:01:00 +0000
Manifest next update: Mon 09 Jun 2025 05:01:00 +0000
Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: fp6aKriT8UrwKQN0VGievMGusoa8FdEu0VhDcqBHSPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:d9:af:1a:92:09:19:97:aa:82:85:0b:9e:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Jun 8 05:01:00 2025 GMT
Not After : Jun 9 05:01:00 2025 GMT
Subject: CN=bcd8058b80a683f23d0060e3a77dc06a64ca6449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:d6:a9:8f:09:c3:d5:3c:6b:57:f4:2b:ba:
c2:54:89:54:79:f7:71:57:92:28:01:00:65:06:f4:
1e:a2:78:6e:67:23:0c:eb:91:b5:15:82:c0:a3:8e:
75:c7:66:19:bb:0a:20:35:df:ae:94:95:11:a7:be:
91:1f:35:7e:9a:a9:bb:bf:95:40:01:6a:27:10:96:
27:4e:7d:f9:6d:f2:df:d6:97:a8:3d:7c:78:71:32:
a8:18:4f:23:90:74:9f:cf:dd:e6:d7:61:78:54:e9:
96:4f:9b:00:bf:13:7f:58:63:26:21:4c:df:c9:89:
2c:47:96:7b:19:93:b1:eb:c4:46:ef:4f:71:1f:9a:
d9:ec:5d:79:1f:16:62:a1:04:96:50:4f:67:d7:17:
1a:df:87:cc:8a:74:bd:d9:12:83:e3:2f:59:ec:39:
49:37:53:6b:9d:42:d5:2b:75:ae:94:3b:cf:b8:a8:
10:52:46:a4:39:6f:f7:7c:6e:e4:b2:39:64:c4:25:
9e:dc:24:7c:41:d0:be:c7:26:8d:f5:91:9c:76:60:
70:ab:3e:45:1f:d2:39:7f:f2:e2:16:21:5d:60:9a:
47:68:35:85:3a:6a:16:5f:9f:5a:29:0a:85:03:51:
09:ab:92:70:3a:1d:29:33:07:b2:4e:96:33:54:53:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:05:8B:80:A6:83:F2:3D:00:60:E3:A7:7D:C0:6A:64:CA:64:49
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:09:33:02:f5:30:3d:4c:d3:24:5e:f1:e2:3b:1a:30:62:
ed:8c:32:a8:db:01:c7:48:31:3e:0e:2b:ee:bf:90:08:a3:9e:
19:c0:46:06:ea:55:96:f3:3e:03:f6:d2:54:23:c8:9b:b2:33:
95:93:11:53:5e:88:56:f3:3e:d5:1c:59:6d:e0:e2:b2:eb:c2:
a8:67:82:50:fa:1d:0d:4b:b1:c4:10:53:71:4a:39:b7:89:9d:
c8:30:91:eb:40:12:a0:a5:d0:48:f6:84:27:d2:6c:33:74:0e:
e5:03:07:31:c8:1a:95:fc:81:c2:2e:5c:63:e1:b7:ca:b5:ed:
7b:73:77:08:b2:ea:72:45:73:2d:3b:67:c7:ef:0e:76:06:d1:
0d:d3:21:23:a9:a6:64:10:28:f6:10:6d:12:ea:1d:83:c9:cc:
fc:5e:8e:59:29:08:1e:f7:de:2e:de:84:ca:e9:58:5b:2c:63:
1e:ed:83:2b:ba:99:57:98:84:40:9b:77:22:18:e7:28:3a:dd:
47:75:3e:3a:2c:dd:29:e8:7b:67:e6:b5:b6:d7:e9:af:5a:7a:
88:ce:7a:66:d5:87:55:f7:f2:3f:96:8e:76:54:79:cd:13:a9:
07:3f:cc:2a:a6:f5:62:3f:2e:11:30:af:bb:44:79:94:8f:3d:
52:9c:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:55 2025 by rpki-client