Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: XrqwS8+92Rj2ww6CjdDaTsnH7VsIkvjHDHvMYITdsnE=
Subject key identifier: CE:04:B7:72:08:15:58:BD:EF:06:F8:8A:E4:C9:E2:02:1C:DE:C5:E0
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019771F60A5D54B026496CAD509B69E1E348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0C71
Signing time: Sun 15 Jun 2025 05:00:39 +0000
Manifest this update: Sun 15 Jun 2025 05:00:39 +0000
Manifest next update: Mon 16 Jun 2025 05:00:39 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: vvzbLwb5CPgKz/wPvBoWuvDLsjv1Kbh/wII7wZYV1Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:0a:5d:54:b0:26:49:6c:ad:50:9b:69:e1:e3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Jun 15 05:00:39 2025 GMT
Not After : Jun 16 05:00:39 2025 GMT
Subject: CN=ce04b772081558bdef06f88ae4c9e2021cdec5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:c5:09:3b:83:69:a9:c6:6c:89:34:80:38:
ff:cb:1e:76:e6:39:29:e6:83:0a:b9:a7:3e:60:c9:
62:a5:b5:42:00:83:c0:89:42:f4:07:d6:df:84:cc:
0e:cf:40:f2:79:61:49:3d:40:6d:77:e3:02:9d:cc:
c0:93:98:88:76:ac:58:82:f8:47:bc:31:6c:39:f2:
73:ae:f9:a1:ba:eb:a0:3b:79:1d:39:f9:2f:fe:19:
34:5b:c9:cf:67:64:f5:77:bf:ea:54:3e:9a:ce:65:
84:e9:38:d7:88:c6:b3:d8:bb:09:ba:0d:ef:ab:fa:
03:14:af:86:68:43:fd:84:1b:0e:62:03:c0:d6:bf:
c6:4b:69:fa:c6:b4:4a:62:78:8d:ca:bf:74:97:75:
a4:fa:52:58:4c:6f:c9:95:98:c5:b5:bb:0c:af:40:
48:2b:ef:25:ee:85:26:3b:fd:ca:b1:f1:e1:7f:3f:
8e:73:6a:a3:1e:17:e7:ec:6e:0e:81:7d:86:e7:25:
50:99:ff:e0:cc:47:ea:7d:e4:e4:31:eb:6c:d2:29:
2e:f2:02:11:45:c6:24:c4:e5:12:fa:7b:2a:db:73:
e6:bf:b3:fd:2a:fc:5a:03:e6:61:5f:63:46:fd:aa:
f2:0d:b6:f9:f9:2d:71:05:e6:9c:05:c0:45:16:58:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:B7:72:08:15:58:BD:EF:06:F8:8A:E4:C9:E2:02:1C:DE:C5:E0
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f3:23:92:9f:6e:8b:87:14:93:9c:f6:8d:4d:32:73:3a:41:
20:25:4e:f2:0e:3b:e3:99:b4:8f:41:0c:95:40:38:2d:f4:19:
73:5e:ad:1d:d5:79:4c:23:c4:64:4c:f6:00:a1:b3:7a:2d:40:
3c:27:da:f1:01:25:b8:1f:e1:08:21:64:55:3c:13:88:dd:da:
41:5a:bc:00:15:5c:e8:81:fe:5b:99:54:eb:ab:e6:29:f2:d0:
6e:36:ac:d8:6e:98:15:73:1f:31:fe:86:23:7c:b4:53:a9:ad:
f4:30:be:82:f4:75:67:5b:fa:c1:63:d2:22:44:34:82:b2:13:
2b:9c:b6:86:d5:9d:2c:f0:b1:d0:9b:e5:eb:bc:aa:99:e3:3b:
db:b9:41:6e:f1:1f:9d:f0:45:40:ef:e5:85:5d:9b:f1:27:9b:
af:81:95:6b:4d:08:1b:93:59:dd:4e:47:80:df:0e:7c:2d:1d:
3a:e1:c3:5d:66:65:d7:2b:bc:05:e6:aa:b7:c0:e1:4d:e5:85:
42:d1:40:56:06:ed:f7:e8:d1:ca:b1:74:2f:2b:98:74:3f:11:
a6:15:1e:db:f2:be:cd:57:f8:24:5d:b3:b9:6a:20:e3:40:c9:
de:8c:08:90:7f:47:2d:b1:3c:d2:02:57:e6:54:fa:52:e7:db:
47:02:d9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:56:49 2025 by rpki-client