Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
File: cs3rVmQuM1iXcef9pxu3HgF_nZY.mft (raw, json)
Hash identifier: Or0f2DL4qWQPDWuT7B5ta3M7LOZzcbDW9Ybehs90voA=
Subject key identifier: 33:CC:53:89:6E:EF:57:47:4A:88:AA:24:D7:67:AD:44:32:5A:65:29
Authority key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
Certificate issuer: /CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Certificate serial: 0197499F27B748ECF0B85B4F2DEC8830544B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
Manifest number: 0A9A
Signing time: Sat 07 Jun 2025 09:00:56 +0000
Manifest this update: Sat 07 Jun 2025 09:00:56 +0000
Manifest next update: Sun 08 Jun 2025 09:00:56 +0000
Files and hashes: 1: cs3rVmQuM1iXcef9pxu3HgF_nZY.crl (hash: 5Xlkusz4laNh/YXlECWCiqUmOffVM6PyWIXsbtYiqE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:27:b7:48:ec:f0:b8:5b:4f:2d:ec:88:30:54:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Validity
Not Before: Jun 7 09:00:56 2025 GMT
Not After : Jun 8 09:00:56 2025 GMT
Subject: CN=33cc53896eef57474a88aa24d767ad44325a6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:72:f2:fc:ae:28:30:d5:65:de:56:29:2a:
07:5e:4b:ea:09:32:1c:be:15:ca:05:38:30:9f:e1:
27:3f:9c:18:17:a3:27:a0:5b:94:df:7c:7a:a0:6f:
4e:97:be:eb:12:cd:28:95:04:00:ad:2a:87:49:bd:
13:2d:a2:5e:0b:9c:78:dc:a7:b5:74:a8:b7:32:22:
e5:74:97:7f:4d:f0:fa:ad:df:96:e9:59:23:34:48:
2a:c7:8e:eb:a5:61:64:02:3a:22:41:1d:98:7d:53:
20:c8:83:e4:b1:8b:5d:e3:99:fa:da:66:f3:2e:7f:
da:96:42:b3:b0:d2:8e:68:b2:30:4f:a6:cd:b4:d1:
80:5a:e8:f2:8a:5c:92:f9:6b:4c:7c:95:fe:8f:e6:
a6:31:19:c4:31:d5:dd:37:d0:5d:52:5c:b9:af:bd:
98:37:95:85:34:2a:82:bb:f6:4d:8c:29:7a:ee:6b:
67:ff:ee:21:7f:eb:cd:b0:9d:a3:cf:c0:73:09:8c:
1f:5e:b3:96:08:fd:b5:cb:f0:62:7d:6b:5f:0b:d8:
27:44:40:4e:fe:a4:f1:b2:75:da:f0:b5:36:a5:e2:
f6:75:12:da:88:33:19:11:82:33:11:04:f0:49:63:
24:e4:1c:5c:c7:21:04:c3:e0:df:e8:15:09:5b:0a:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CC:53:89:6E:EF:57:47:4A:88:AA:24:D7:67:AD:44:32:5A:65:29
X509v3 Authority Key Identifier:
keyid:72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:aa:60:d3:12:65:4c:b4:0b:8b:b3:9f:14:4e:36:13:72:84:
96:ff:a7:dc:fb:49:de:b8:47:1b:eb:a6:e8:8c:b4:03:d9:ab:
bf:3a:d5:f0:7d:28:7f:c8:3d:0b:dd:31:00:7f:2d:1d:14:f7:
64:b2:ab:6c:1b:e3:e9:e9:36:2d:cc:88:f5:5d:f4:5e:d3:04:
75:fc:5d:ef:cb:1e:73:84:14:b1:16:a6:45:88:11:18:19:44:
9c:63:a7:00:d4:35:58:d1:29:15:4b:fc:d2:0c:99:92:3d:30:
b1:ec:5e:ef:65:c6:7c:b7:17:a2:7b:cb:59:81:1d:25:2c:fd:
f0:5a:0b:b4:a7:db:5f:72:69:ff:21:24:d1:a0:58:24:3a:7f:
ef:df:43:9c:ab:78:2f:09:c7:35:c1:47:be:a7:7f:b7:9a:fe:
62:38:ad:3b:3a:ee:1a:20:dd:db:23:30:7a:a4:e8:8f:cd:68:
b2:53:e4:6e:6c:83:99:cb:94:30:ee:71:dd:f2:66:ab:0f:e3:
23:90:bb:4f:03:35:e8:1e:c3:b8:55:aa:0a:a0:e1:4e:32:2b:
ae:c9:05:79:c5:ad:d7:93:a5:84:30:2d:1e:e4:88:be:59:02:
d6:13:f6:3f:78:d3:78:63:d2:4e:ca:eb:04:53:63:62:c8:87:
23:1e:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:27 2025 by rpki-client