Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: cyXI73MXHuWxnrhFjrh61AEpzXgs6+fkzGADf9ogeJE=
Subject key identifier: 8A:55:C2:25:ED:47:48:0F:B5:97:AD:BE:8C:FD:98:32:E4:90:7A:F7
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 01976C2B4DE2330E367D815DD8771C051A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0C6E
Signing time: Sat 14 Jun 2025 02:01:06 +0000
Manifest this update: Sat 14 Jun 2025 02:01:06 +0000
Manifest next update: Sun 15 Jun 2025 02:01:06 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: ALosr9r0SDHqgJDUX6MUN/x9nePe/KeMZvLyjDR42qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4d:e2:33:0e:36:7d:81:5d:d8:77:1c:05:1a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Jun 14 02:01:06 2025 GMT
Not After : Jun 15 02:01:06 2025 GMT
Subject: CN=8a55c225ed47480fb597adbe8cfd9832e4907af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7a:2f:ed:0c:15:ba:c8:8d:07:e3:c4:20:9c:
f5:54:ba:a4:c9:04:b1:c4:18:ec:d8:cf:b3:31:19:
32:e4:db:95:1b:c7:8b:db:7c:75:08:8d:91:b7:15:
07:35:79:b9:7e:37:54:0d:a6:de:f6:d7:fa:13:a6:
ce:fb:1a:a5:6b:8b:1a:63:59:0e:4e:62:fd:74:f7:
c5:1a:8e:dd:79:6f:1f:22:f7:a9:74:c1:51:94:68:
a2:ff:c1:5d:ec:0e:98:12:0a:3f:a4:f4:3a:ec:14:
44:ea:2f:8a:35:b0:9d:19:40:67:01:1c:a3:07:c5:
fc:38:0f:03:0b:31:4a:3b:d2:7b:9a:9d:0e:c1:53:
fe:13:00:ad:ed:8e:37:be:0b:5e:e3:ad:22:19:f5:
fd:43:18:2c:9b:09:05:13:18:2c:e4:28:9e:5c:5f:
17:66:13:8f:55:d9:38:a5:9b:b2:77:40:fa:48:ce:
a0:09:f5:4b:48:8d:02:ed:ba:67:c8:2b:9c:1c:f2:
ef:4e:a6:4b:26:30:2e:f7:32:d6:5e:3f:87:e5:8d:
be:77:42:5e:0c:92:3a:be:91:fe:b0:fe:8b:e5:30:
90:f9:95:63:83:21:22:8b:bb:a2:c0:bf:d1:fc:17:
d2:25:30:fd:a7:44:36:4a:77:27:d0:63:31:16:42:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:C2:25:ED:47:48:0F:B5:97:AD:BE:8C:FD:98:32:E4:90:7A:F7
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:3c:6b:c5:ba:a3:5f:42:2a:7b:ca:d1:b2:d0:af:ba:23:
7b:96:1d:85:64:36:eb:23:5e:12:2a:38:d8:fb:b5:cd:67:0e:
d8:0e:88:7e:83:0a:e6:6d:fe:db:67:53:f4:a6:6d:dd:47:b7:
23:f4:04:86:78:dd:4a:89:d5:cd:aa:cf:f2:99:6b:e2:a5:8d:
32:17:c8:60:30:3f:c3:46:49:b5:db:af:d0:e4:66:95:c2:f3:
33:70:ed:89:23:f9:b8:34:50:7e:50:e1:da:46:d9:3c:90:19:
44:73:e6:d9:01:b9:3a:3b:ee:6a:73:7b:42:a7:fd:36:6b:74:
be:8f:08:3f:cf:96:b7:a2:da:6b:45:f3:88:c3:5e:18:0b:57:
ba:3f:b5:ef:53:de:eb:36:bc:89:8a:03:50:bf:ae:b6:5a:1a:
6f:43:ba:a6:75:94:64:d0:71:98:20:fc:08:c9:47:3e:c4:2e:
5c:ba:64:0a:1c:43:ee:87:5e:5a:4d:78:34:a0:ba:d3:bd:fe:
e6:2c:7a:9a:82:eb:bf:3b:5d:36:61:ea:39:c9:87:8d:fa:0b:
93:b8:ac:5d:8c:2d:04:0a:9f:ee:e7:5b:b9:1d:ad:f0:5a:7b:
1f:d8:89:6f:0d:c0:86:ed:cc:77:e7:2f:ab:42:18:9d:f1:47:
80:3e:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:59:11 2025 by rpki-client