Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier: YbW5qENa/7VDmc5ZecghT6JzItvFLSMkYaTuh4m6qCc=
Subject key identifier: 03:76:3F:EB:20:53:4C:7B:B2:03:3F:DF:2E:01:8F:2B:26:A7:43:D9
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial: 01974CD72010976BED5ECDB90A7ED0AD33EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number: 1059
Signing time: Sun 08 Jun 2025 00:00:56 +0000
Manifest this update: Sun 08 Jun 2025 00:00:56 +0000
Manifest next update: Mon 09 Jun 2025 00:00:56 +0000
Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: sADXIzV6v7waQ/i4op7g2D+4p/kMKS9YIK/McBCjDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:20:10:97:6b:ed:5e:cd:b9:0a:7e:d0:ad:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Validity
Not Before: Jun 8 00:00:56 2025 GMT
Not After : Jun 9 00:00:56 2025 GMT
Subject: CN=03763feb20534c7bb2033fdf2e018f2b26a743d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:24:20:10:8f:ae:08:ed:8f:40:4c:f2:37:
76:21:19:f6:54:c8:91:c9:14:8c:e3:9a:7c:7d:24:
a8:69:da:44:09:5c:0a:f8:4e:3f:1d:e9:9c:2f:d7:
ce:57:89:74:63:6f:31:5b:16:4b:82:a9:39:b8:3e:
59:17:34:a8:3c:cb:7e:7a:05:37:9e:06:95:eb:a5:
74:8e:25:81:f3:c4:94:48:0a:35:ba:ca:18:02:a4:
6e:db:50:ca:ea:55:f5:ef:49:8e:6f:d2:2c:67:80:
1a:e8:d8:bd:d7:8f:7f:e9:12:1f:d9:c1:eb:16:59:
92:63:b5:0d:5f:1c:c3:57:39:c8:d9:bf:9c:71:e6:
27:c6:94:51:1c:f8:2f:35:35:0a:2b:a9:26:3b:23:
d6:fa:dd:e8:09:1c:ec:02:5b:e0:e7:61:1d:91:34:
31:37:78:c7:a0:27:a7:19:3c:28:c6:28:c6:6c:1a:
42:37:60:d2:a9:c9:3c:d6:32:24:c3:2c:be:1b:1a:
5a:d7:c8:02:e6:12:c6:8d:85:c7:1f:61:60:9e:5c:
b2:cc:0c:71:cc:b5:6e:f0:b4:87:7e:69:fb:ff:e1:
94:2d:e0:2e:21:14:61:4b:42:2c:1d:91:aa:4d:0b:
c2:e4:10:a3:23:8f:b8:f7:5a:8e:90:09:c8:7a:da:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:76:3F:EB:20:53:4C:7B:B2:03:3F:DF:2E:01:8F:2B:26:A7:43:D9
X509v3 Authority Key Identifier:
keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:f7:0e:48:b4:2e:55:12:7a:60:ab:66:4f:ac:55:e7:c1:
26:eb:89:d6:41:f5:f1:61:2a:c9:0e:b5:5d:9c:26:db:eb:ff:
c9:3e:2c:e7:d2:27:e2:61:29:fa:51:c5:bc:09:48:d0:23:75:
6b:3c:e9:f9:fe:24:51:b1:93:b0:20:60:50:13:21:5e:5d:ca:
46:2f:c2:9f:d8:e3:82:0a:f4:a4:57:89:b1:bf:ac:49:1b:09:
d1:90:31:b9:db:7a:b8:7b:0a:ad:bd:37:c0:b9:c0:de:10:bf:
fd:86:0d:1f:4b:12:5d:b3:1d:22:70:b8:d7:a5:c8:f3:d5:05:
ce:bb:c9:e0:49:b1:13:3c:e7:24:22:af:74:06:ea:9f:a3:f7:
7e:c8:5b:ca:f6:b5:9e:c4:b3:7c:1d:54:42:96:ae:2e:41:72:
42:4d:bb:41:23:6a:14:b5:a4:46:dc:a3:f3:9f:51:e9:b1:6e:
9d:f1:7a:20:41:5b:07:21:b8:ee:05:57:bb:93:db:fb:7d:ba:
8c:85:18:90:c2:3d:ee:fc:a2:d8:5c:20:ca:8e:33:6f:4b:ae:
19:2e:2b:8a:df:3a:91:ed:1f:61:49:5e:4c:76:f5:85:3e:66:
5e:1f:34:4e:95:4d:20:20:79:48:bb:4d:69:e3:39:bb:fd:32:
06:31:6c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:13 2025 by rpki-client