Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: z6lu5w/zsHMTuXlmfkV/l9TdIeMOaF7KN5iZzSTVBvU=
Subject key identifier: ED:98:F6:E9:B7:8C:C2:DA:33:17:49:2E:79:97:B1:B0:53:19:35:22
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 01974AE8F52759CAB384271970E3FD978635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 05B5
Signing time: Sat 07 Jun 2025 15:01:10 +0000
Manifest this update: Sat 07 Jun 2025 15:01:10 +0000
Manifest next update: Sun 08 Jun 2025 15:01:10 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: OE+CmQAJy4gHOb3Fv+hpRtA35hEKApTcF8mKfwMZd7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f5:27:59:ca:b3:84:27:19:70:e3:fd:97:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Jun 7 15:01:10 2025 GMT
Not After : Jun 8 15:01:10 2025 GMT
Subject: CN=ed98f6e9b78cc2da3317492e7997b1b053193522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:29:db:b0:fb:08:6f:a1:ac:93:9a:5e:fb:57:
52:b7:6f:29:db:d2:b4:a3:4a:76:a3:de:bd:20:60:
d9:62:ec:53:20:b6:a9:70:9b:5c:d0:a1:e0:68:d8:
03:15:9b:e4:6f:e7:07:d4:23:0a:e4:b8:3f:a3:7f:
83:4b:69:69:57:b9:8f:d5:a0:c4:6b:c8:53:ac:ae:
34:ef:76:57:f1:0f:0f:ae:ce:0e:7a:20:22:7b:b5:
f7:4e:c3:89:5d:0f:eb:48:51:40:7e:88:c5:66:9f:
83:6c:28:10:db:cf:05:38:43:bb:79:e4:8f:00:a9:
15:d5:9e:84:49:70:07:c8:e9:3d:d1:fa:26:4f:77:
f9:1e:f4:72:dd:85:af:ce:86:e1:74:5a:8b:0e:a9:
fd:95:c4:54:04:af:a0:cb:50:a4:c0:0e:98:36:e3:
27:f7:16:61:47:83:27:92:e6:a2:de:85:e3:ab:b7:
5e:a7:e9:1e:ab:24:72:84:b0:2b:fe:e8:1d:f7:f8:
18:df:ee:b2:0b:0f:17:68:c1:37:c2:6c:96:b7:b3:
3f:48:e9:6f:dd:93:62:a0:86:23:36:e3:81:59:c4:
81:b1:c0:b3:bb:54:d0:e5:fb:89:ce:3b:fd:2a:e8:
56:2c:6c:df:7d:7c:dc:7f:73:aa:f9:a9:79:02:f3:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:98:F6:E9:B7:8C:C2:DA:33:17:49:2E:79:97:B1:B0:53:19:35:22
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:24:c2:50:76:d4:4b:a9:45:4d:4b:16:d6:95:97:a2:55:94:
3d:68:96:f4:31:18:fa:04:f7:5f:79:6e:da:53:ed:01:9d:ab:
90:d2:2e:e9:33:81:46:25:ff:4a:ab:87:5f:ae:da:bc:57:0b:
31:42:5e:3e:c4:c7:61:67:32:ea:5c:61:1f:de:07:20:bc:23:
60:9f:5f:13:b8:f7:56:53:5c:c5:9b:d1:bd:f2:dd:dd:40:16:
21:fe:2a:7e:11:cc:4f:c1:e4:13:43:d3:74:a7:d0:b2:ca:59:
b9:13:05:aa:f4:a5:4c:de:04:eb:d9:74:22:eb:6f:80:50:17:
14:f6:2a:27:d8:85:24:e1:17:c3:7a:03:b4:14:bf:57:13:5d:
79:9e:0b:69:37:04:dc:91:fe:88:23:d2:a5:a9:3c:51:9b:63:
af:4d:b5:d7:82:65:b4:6d:41:fc:0a:69:7d:65:e5:d2:6c:02:
dd:6f:50:57:a3:cc:d3:17:10:4a:b6:52:bd:f5:3e:3d:55:73:
77:22:47:29:35:3b:aa:ce:a2:d1:5a:8c:30:33:bf:b7:9f:9c:
22:37:e0:13:fb:d4:4c:9b:f5:9d:17:f4:34:41:11:b8:d7:8b:
bd:4d:1e:da:fd:c0:b2:1a:06:9f:9c:9d:76:6a:b7:f8:60:57:
9f:c6:6a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:46:27 2025 by rpki-client