Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier: grzjAw6d9fTYVTP3/mM5cF0JqHzOW6mHEZAgn0V3vIg=
Subject key identifier: 86:E0:43:A7:6A:CD:3E:87:F5:86:86:A8:F9:35:D9:CC:1E:AA:C7:39
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer: /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial: 0197488CB789EEA26E958E5F7AD3E3BFB55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number: 150A
Signing time: Sat 07 Jun 2025 04:01:10 +0000
Manifest this update: Sat 07 Jun 2025 04:01:10 +0000
Manifest next update: Sun 08 Jun 2025 04:01:10 +0000
Files and hashes: 1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: zvasErgdfdzQgj/BXWIq7L/KG4gY6Vku7WtFHkZd/I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:b7:89:ee:a2:6e:95:8e:5f:7a:d3:e3:bf:b5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Validity
Not Before: Jun 7 04:01:10 2025 GMT
Not After : Jun 8 04:01:10 2025 GMT
Subject: CN=86e043a76acd3e87f58686a8f935d9cc1eaac739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:1d:1b:c9:bb:82:79:44:59:e9:c3:52:93:
13:a5:d0:a9:fb:2e:19:3a:3c:e2:e7:26:f8:46:0b:
29:6b:13:c8:10:bd:dd:e4:7b:c3:27:b5:b7:04:07:
dd:85:e9:72:0d:fd:d8:db:0f:05:8e:5b:b5:28:02:
09:75:92:da:e3:b5:ec:11:5b:cc:eb:7e:11:88:84:
13:e7:35:69:ad:00:a4:20:36:f6:ea:f8:a8:81:90:
06:4c:fa:5a:13:a6:67:3b:9a:1c:71:25:ba:c0:84:
6b:43:4f:60:35:c7:84:55:a0:0b:c8:4e:20:f2:48:
ee:38:3c:88:33:f6:ad:12:3b:e7:0d:72:2b:91:02:
71:8a:ac:a4:bd:1a:b4:f9:3b:6a:4c:a2:09:cf:23:
d7:73:f0:cd:bc:a2:67:fe:b4:83:c6:39:dd:19:64:
4b:d2:be:d5:43:a7:da:1b:10:8e:a2:61:14:3c:f2:
d1:9f:66:ca:d1:bd:dd:a8:51:2b:33:61:18:c1:62:
2c:5f:56:25:5b:72:ac:2e:e4:23:53:29:3b:ae:f9:
ea:a0:e2:95:98:da:d3:32:86:ae:20:15:fb:29:0c:
ed:b7:b6:18:76:03:10:45:22:04:9f:6d:45:1d:e8:
8d:b5:e4:1b:47:2f:d8:f2:51:a6:5a:57:35:56:90:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:43:A7:6A:CD:3E:87:F5:86:86:A8:F9:35:D9:CC:1E:AA:C7:39
X509v3 Authority Key Identifier:
keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:44:85:32:9f:16:d9:7c:87:95:f0:4b:f4:3a:f4:db:23:99:
b9:40:28:d3:76:b5:6f:dd:ed:03:d6:07:e5:0f:94:18:ca:4d:
22:31:f5:55:70:6a:dd:c1:a6:c9:1e:bd:51:7a:7a:b0:30:d0:
a8:b0:e5:3d:4f:7c:09:c0:3c:88:92:c3:66:92:6c:22:ce:0e:
94:3f:71:0e:e4:cf:60:f4:b4:19:b6:e0:b1:4a:6b:18:b8:e7:
2d:ee:81:e1:63:60:95:8d:32:f5:72:82:60:7d:7b:73:cc:11:
37:98:fd:eb:ec:6a:d4:1d:ac:0e:da:55:3e:c1:dd:56:01:be:
f7:af:8f:03:3c:7d:f3:4e:10:18:3b:77:83:5c:29:30:7a:64:
b8:03:ab:e0:da:75:57:39:76:fa:e9:7b:44:4e:37:4e:b3:47:
dd:14:75:60:e4:76:97:36:2f:82:27:ef:33:5d:88:81:67:da:
96:91:7e:8a:d4:81:cc:37:b4:39:2f:a1:9a:1f:42:42:b5:00:
07:57:62:d6:7e:a7:f0:0c:80:b5:76:a8:b1:67:f7:02:d7:46:
c3:e4:f7:ee:7a:9d:7e:21:6d:6b:22:1d:6b:6a:7c:f3:e0:13:
e0:ad:c4:26:1c:b7:e0:f2:d2:a0:73:da:57:7a:5e:93:96:04:
41:e3:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:13 2025 by rpki-client