Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: IdFDwTDIjaROFaFMW85god3EWNtavyDVUf8MOhNeJII=
Subject key identifier: 30:BA:00:F4:3F:5D:36:F1:E6:E4:A1:10:55:81:DC:DE:8D:C6:36:09
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 0197507C8F440A0B953F6968B8DEEDE24C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 94
Signing time: Sun 08 Jun 2025 17:00:29 +0000
Manifest this update: Sun 08 Jun 2025 17:00:29 +0000
Manifest next update: Mon 09 Jun 2025 17:00:29 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: x5ZPw1tBKb0siK6pMIng5OAoOlnZWwG4akr2TSRMS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:8f:44:0a:0b:95:3f:69:68:b8:de:ed:e2:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Jun 8 17:00:29 2025 GMT
Not After : Jun 9 17:00:29 2025 GMT
Subject: CN=30ba00f43f5d36f1e6e4a1105581dcde8dc63609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:0b:7a:d9:42:0e:27:fb:ab:a8:fc:39:ed:
9f:f6:79:48:4b:c5:17:d1:0c:1b:21:34:6a:8e:da:
59:61:43:3d:03:8e:f6:ed:7a:cf:3a:83:c0:13:9b:
70:1a:31:86:54:e4:80:f8:78:e3:86:70:ec:44:e1:
90:7a:be:99:89:f7:1c:fc:77:30:75:01:aa:1e:d3:
d9:45:9e:75:e2:41:8e:3d:bf:9a:9b:a1:ab:95:05:
7c:25:a9:ca:c2:4a:f4:c2:db:69:74:b4:f0:b6:0a:
83:0a:90:b7:00:1e:a2:89:55:9c:74:51:e0:95:5a:
7f:c2:63:94:1f:84:03:fc:f1:a7:88:04:20:56:cb:
c1:1e:00:13:03:61:ff:74:6c:00:15:36:19:e0:02:
eb:0e:58:9f:ae:65:dd:56:cb:cc:00:be:44:58:fc:
20:35:9e:33:e4:55:8f:a4:7c:d8:c3:01:96:f6:0c:
cc:d3:de:c5:39:e1:7d:29:d9:68:f0:05:a9:6f:14:
d4:9f:d3:da:b2:9c:39:8b:db:67:f4:7e:81:7f:2d:
95:d2:e3:bb:8d:ca:40:76:91:f1:70:36:7a:26:7d:
2f:54:6e:10:5e:ed:b1:ca:2c:1c:e9:d2:01:ff:52:
d1:bb:fc:c8:1c:9c:5e:f6:f4:71:2d:60:9c:96:24:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BA:00:F4:3F:5D:36:F1:E6:E4:A1:10:55:81:DC:DE:8D:C6:36:09
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d5:85:07:3f:61:8a:e0:29:29:56:82:7c:38:7a:e3:70:49:
61:ee:b8:03:ef:d4:70:58:87:32:be:29:e2:4e:77:2c:5f:74:
bd:a1:d1:88:27:5f:e1:c8:63:1e:5c:b0:ff:da:77:5f:93:cb:
bc:25:f5:02:be:88:56:da:2d:0c:2b:bf:c9:40:2a:dd:87:74:
79:d5:12:d8:c5:6b:81:ef:40:48:93:b6:43:2f:8b:7b:0a:4d:
eb:bf:29:c7:30:fb:b2:5f:84:d8:f0:06:c5:ed:98:80:03:dc:
fc:65:68:a9:d0:da:08:2c:70:39:d3:23:86:bb:bd:7d:8d:ae:
40:28:0c:c2:62:f7:a5:fa:15:4e:f4:dc:b1:fe:5b:89:d8:f8:
ef:30:ee:1d:b6:6d:6a:89:fc:25:82:a4:80:c3:4d:dd:80:12:
ad:db:0e:25:6f:c8:e9:12:6c:2d:d1:6f:0a:f6:20:04:c2:b4:
b1:1f:0e:e0:b8:fb:be:d7:c6:df:c2:ef:54:3b:bd:a3:08:ee:
cf:a6:b1:73:b3:cf:64:26:e2:0f:07:53:a5:6b:58:0b:a4:72:
f3:b2:4b:29:36:61:bb:39:b0:ce:3c:7a:0e:fe:8f:3d:9f:b1:
97:32:ce:b2:c0:c4:f9:b8:89:20:4e:e8:bd:2a:8f:c4:58:35:
1d:2a:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:00:53 2025 by rpki-client