Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: crlefhUv4zJFHSQZOoP1X8Jg8sMtrIRCnSUNZXBpaGE=
Subject key identifier: D3:3B:B1:C9:64:BE:D8:8A:FE:C2:5A:61:25:D7:87:C7:3C:FC:E7:C5
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019745C2312FCD80F9068E7AAA51C61EC33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 15:00:43 +0000
Manifest this update: Fri 06 Jun 2025 15:00:43 +0000
Manifest next update: Sat 07 Jun 2025 15:00:43 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: HecFAtLtZVew5PAYuOLsRjKFpjW/zMwCtdhrO5HkFhc=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:31:2f:cd:80:f9:06:8e:7a:aa:51:c6:1e:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Jun 6 15:00:43 2025 GMT
Not After : Jun 7 15:00:43 2025 GMT
Subject: CN=d33bb1c964bed88afec25a6125d787c73cfce7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:92:04:62:3c:b3:fa:87:ec:73:96:69:5b:
1b:68:7e:c7:68:f2:b2:5f:69:31:fc:2d:eb:77:23:
d7:51:ab:f2:b3:aa:62:ce:52:55:60:69:a7:19:a8:
bb:7d:61:9b:1c:ac:86:76:c4:c4:9d:a9:4d:8b:7d:
ab:d8:b9:7b:d2:8c:2a:e9:14:54:f7:9f:98:9e:de:
fb:8f:e4:c9:48:de:88:a4:f5:bf:2c:92:a5:ef:87:
56:df:5a:66:e7:f9:cf:cd:2f:12:3c:ec:75:c1:c8:
d4:a1:fc:90:03:7a:4b:e7:d3:37:fc:ef:d3:f1:25:
e4:1e:c7:3a:07:a8:bb:f0:06:3f:d6:72:f5:b9:26:
f3:a0:02:c1:36:e6:f9:68:da:00:7f:4f:8b:cf:d1:
2c:08:81:61:02:70:ca:42:69:22:16:1c:1b:87:cd:
28:55:ec:51:13:f8:61:97:4d:f5:ee:7e:e6:e2:51:
38:41:29:3f:6f:39:1b:22:3b:50:da:50:d6:45:14:
77:d1:5b:18:bf:95:9d:02:ad:16:8d:5d:3e:0c:50:
ba:3c:36:ef:1e:c5:7f:0c:7b:8c:f6:15:3d:f2:1e:
f2:69:d1:9a:4a:e8:21:8f:38:62:c2:79:8a:25:c2:
5d:78:f3:a1:63:00:a2:31:92:a4:a6:64:c0:51:16:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:B1:C9:64:BE:D8:8A:FE:C2:5A:61:25:D7:87:C7:3C:FC:E7:C5
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:06:99:a4:88:35:c2:c9:99:94:ed:ee:c2:9c:13:d8:df:0b:
ba:fb:e0:32:4d:b3:07:6f:a6:f8:65:8f:2a:3c:da:73:3b:8e:
b3:b5:b3:a0:cb:20:ce:e7:89:78:7a:b8:0a:e3:d7:3a:cd:aa:
8c:36:37:52:5d:7f:69:b5:58:2e:ac:29:5b:11:af:78:8c:fc:
af:0d:20:cb:9e:c1:8c:3c:a1:64:fd:5e:d4:93:87:8d:84:69:
40:d1:cd:ce:91:e3:8a:b8:45:76:ba:4b:ab:ec:f7:ff:96:9c:
6e:00:0d:73:9e:e6:20:b7:38:93:be:04:60:a9:00:75:80:06:
7d:71:53:72:cb:60:69:09:91:f8:ce:4c:2c:d8:2d:fb:b0:c8:
5a:b7:04:a2:a8:14:a7:c1:9a:aa:61:bd:2c:2d:ae:4a:b7:41:
ae:05:c4:12:10:d9:89:be:1a:e3:66:12:d6:ac:2b:11:73:60:
92:cc:99:d8:19:52:fe:39:e6:d3:e7:f2:05:77:7f:c5:93:93:
9d:cc:6e:4c:45:65:98:9e:4e:8f:b6:36:6a:2f:fa:2f:28:49:
3f:57:8c:3b:f6:20:6c:7c:14:4d:74:e8:b5:90:84:42:eb:9d:
49:c8:d3:69:a5:19:f4:56:48:4c:2f:8c:26:94:74:7a:e2:7e:
d7:0c:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:44 2025 by rpki-client