Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
File: r3P0pUFxjY8uAl4GGQalvyfOPJE.mft (raw, json)
Hash identifier: UbdjZ5Pf0yVS/KHoJiONZCWJfSrf0q1/7kn2k6SfS2I=
Subject key identifier: 5B:DD:F5:F9:92:2D:BC:A5:87:D3:92:51:31:46:BC:6A:BA:5B:51:74
Authority key identifier: AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
Certificate issuer: /CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Certificate serial: 01974BFB70423414E3339E6153755D342277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
Manifest number: 87
Signing time: Sat 07 Jun 2025 20:00:58 +0000
Manifest this update: Sat 07 Jun 2025 20:00:58 +0000
Manifest next update: Sun 08 Jun 2025 20:00:58 +0000
Files and hashes: 1: r3P0pUFxjY8uAl4GGQalvyfOPJE.crl (hash: UVQi5IGaA2VodFkEhwNRdxeC1XBE9aHNYDM933MfhjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:70:42:34:14:e3:33:9e:61:53:75:5d:34:22:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Validity
Not Before: Jun 7 20:00:58 2025 GMT
Not After : Jun 8 20:00:58 2025 GMT
Subject: CN=5bddf5f9922dbca587d392513146bc6aba5b5174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:f5:6a:8c:98:f3:09:0a:1d:87:28:f0:4b:
b0:95:d6:0a:ce:a6:b2:f0:95:c5:57:50:b2:83:75:
6f:6e:e9:2d:2b:32:d3:65:28:c3:d1:83:12:c6:43:
c7:86:cf:6c:a4:10:de:50:1a:e7:8e:09:41:1d:33:
23:5a:02:3b:fa:c0:ea:58:48:4d:b2:e4:b9:9e:1b:
f4:1c:37:fe:98:22:e0:6f:93:72:07:97:f4:13:2e:
c1:bc:16:d5:45:8b:ca:07:33:22:1a:f3:e3:d7:82:
86:2e:1e:0d:8f:45:e7:03:66:8b:0b:16:8c:45:7f:
f8:11:23:1a:e3:d1:e8:b0:5f:05:78:58:9a:c4:ef:
02:85:09:2d:59:ad:ca:86:0d:ca:0d:13:d3:97:8c:
22:5c:2e:f0:54:16:28:30:e5:f0:37:0c:90:01:08:
87:88:74:72:1c:95:c5:06:0e:67:3e:5d:63:60:67:
18:4c:20:97:7c:a9:3d:a0:db:b8:51:94:26:20:69:
09:57:ca:62:ba:ad:6a:e7:5d:53:08:7b:d2:ad:bf:
13:71:6a:59:2f:38:ec:1c:90:d6:2b:00:1e:04:ff:
e9:1a:3d:8f:02:da:21:51:70:09:d5:9e:19:ce:e2:
a9:69:b2:f1:f6:be:33:87:1d:bd:a4:29:b1:8b:ee:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:F5:F9:92:2D:BC:A5:87:D3:92:51:31:46:BC:6A:BA:5B:51:74
X509v3 Authority Key Identifier:
keyid:AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d0:b4:98:10:bd:6a:29:cd:43:eb:72:78:13:03:eb:37:ac:
2b:6b:c9:24:51:32:2e:73:2d:c4:2f:66:4e:fa:48:38:6a:59:
9f:7d:7f:39:f3:7c:7b:50:e9:db:f3:d5:ad:75:79:59:0e:1f:
5b:ac:ce:98:67:03:68:26:22:48:ba:ce:fb:1a:c7:bd:6b:c6:
c7:0f:4e:b0:8f:04:02:07:0d:ce:f4:d7:d5:e9:a8:2f:d2:47:
01:0d:dd:da:49:2d:58:e2:1f:e9:41:65:d3:a8:29:15:36:79:
ba:41:dc:79:65:e5:b3:6b:e2:27:25:08:45:93:a9:a9:bf:d1:
c1:4d:28:1f:63:10:e6:f1:d9:54:86:a6:ee:c3:ae:c1:81:c8:
17:dc:50:1e:31:42:17:d4:7c:57:0a:71:3b:f6:a7:32:67:f2:
77:e2:84:33:50:15:f0:27:a6:be:d4:2a:28:a8:30:91:1f:fb:
b8:41:48:9e:86:02:46:70:80:fe:eb:f8:6f:9e:83:79:62:c3:
38:69:d7:be:16:3f:8b:5d:3c:41:44:f6:48:01:db:0f:fe:6c:
0d:70:8e:dc:23:f7:d1:97:a3:2f:37:cb:ad:5c:0e:34:ad:aa:
7a:ab:5d:a9:3e:24:56:5e:4d:32:c6:cd:77:82:44:b6:fb:84:
ac:bd:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:53:40 2025 by rpki-client