Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier: gLlpwHvnyiPhUIdmhe2b5CW4kuQ7qQOAYAxwPaYRXZM=
Subject key identifier: E6:63:20:EC:8B:6A:59:18:DC:35:A5:8F:3A:4E:DD:78:2F:6D:F2:74
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial: 01975233FDFADD57D61623255CD49103C445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number: 0C9C
Signing time: Mon 09 Jun 2025 01:00:28 +0000
Manifest this update: Mon 09 Jun 2025 01:00:28 +0000
Manifest next update: Tue 10 Jun 2025 01:00:28 +0000
Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: AVyv80K3Rn61sDbK0mCi+o4DI7WeoKNmJal0Rx1eVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:33:fd:fa:dd:57:d6:16:23:25:5c:d4:91:03:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
Validity
Not Before: Jun 9 01:00:28 2025 GMT
Not After : Jun 10 01:00:28 2025 GMT
Subject: CN=e66320ec8b6a5918dc35a58f3a4edd782f6df274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:c0:fe:8a:d4:f5:53:c8:bc:75:cb:6a:84:
11:37:3f:f3:29:48:89:a3:57:b1:0f:ca:fd:73:30:
d3:98:8f:50:65:06:d8:ff:a8:a2:eb:f6:7d:0d:d6:
0f:3f:55:8f:52:e1:65:9b:b4:eb:55:41:42:c9:04:
19:01:ec:49:41:02:89:52:06:c9:df:25:53:f6:1a:
93:23:6d:57:42:7d:dc:f2:26:de:b0:70:f4:9c:3d:
e0:a8:d3:d5:86:2f:25:a4:71:f5:20:10:a3:6a:8f:
6d:7a:68:18:33:05:6b:da:59:47:20:ab:ea:e8:bf:
76:ad:99:d1:fa:ac:ec:53:90:52:e8:c6:db:22:51:
62:15:a4:ab:a7:4a:20:94:4b:6e:f7:a1:37:91:5f:
51:0b:c1:92:69:8e:19:cb:5d:50:52:25:40:a5:b9:
ec:b1:54:c8:f0:54:8c:6e:98:9f:b3:29:d4:c9:b4:
15:72:2f:03:f4:ac:30:ba:c1:c2:ab:94:c0:8b:9c:
d5:2d:4f:02:ea:16:bf:59:9f:a6:1b:42:8d:0c:a2:
da:2f:eb:c1:6a:41:f4:16:f8:c3:e9:66:21:5c:bf:
25:ae:03:2b:ce:69:d2:86:82:9c:78:2b:07:55:15:
2b:96:09:3f:68:c2:70:b5:9c:2e:c9:a8:d7:95:09:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:63:20:EC:8B:6A:59:18:DC:35:A5:8F:3A:4E:DD:78:2F:6D:F2:74
X509v3 Authority Key Identifier:
keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2a:22:ab:a3:a2:72:8e:20:19:a3:72:05:fa:76:81:d9:34:
0a:ca:fd:a3:10:8d:be:6d:d9:8a:b2:35:82:97:44:04:77:4e:
87:8b:02:01:1d:77:36:86:94:82:6c:36:3b:6b:60:b5:6f:45:
95:eb:7e:3f:fa:23:fd:95:f6:c4:76:28:50:4c:f6:cc:80:e7:
bc:e1:b7:90:ce:ef:c0:a3:45:08:b5:1d:7d:c5:c4:58:4a:97:
de:13:b5:38:c7:74:2a:32:63:9e:5a:a5:d9:c6:af:83:e2:88:
f8:5a:79:23:b9:8b:42:77:fa:59:04:dc:cf:24:fd:e5:1c:5f:
1b:fb:1c:d0:6d:b1:19:ee:c4:d3:e2:ae:02:32:4d:ad:ec:5b:
2c:87:ae:69:c6:02:2b:a2:25:98:c4:dc:51:e2:f2:f1:3b:17:
7c:1b:65:24:64:1f:e8:68:96:9f:34:22:cf:3c:7e:1d:e8:32:
61:a2:60:54:7b:34:73:38:06:54:7f:96:96:1c:c2:d3:41:e0:
16:7d:c7:f1:e4:99:5b:bf:f6:03:7d:39:af:fa:6e:c0:88:f5:
bf:10:db:96:ce:22:f9:f0:8f:7f:5e:bb:d3:6a:8f:55:3e:2a:
0f:14:63:8e:57:2b:d3:8f:f7:2d:fe:c9:d0:cf:d6:60:50:9b:
98:21:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:18:44 2025 by rpki-client