Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: 9WImxuMCa3ST9leyH94pd5FRgauvGj55vua9aPreb7E=
Subject key identifier: D9:8D:41:4F:95:51:75:40:BA:C7:CF:A4:39:7A:00:AF:B4:51:7A:94
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 01975045ABF248CBBC75C1D25FD7AB8235B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 14F7
Signing time: Sun 08 Jun 2025 16:00:32 +0000
Manifest this update: Sun 08 Jun 2025 16:00:32 +0000
Manifest next update: Mon 09 Jun 2025 16:00:32 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: P273pRZIVfcYE5Inmepd2mALtqXXqSKjG+qXSV/lYyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:ab:f2:48:cb:bc:75:c1:d2:5f:d7:ab:82:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Jun 8 16:00:32 2025 GMT
Not After : Jun 9 16:00:32 2025 GMT
Subject: CN=d98d414f95517540bac7cfa4397a00afb4517a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:c6:cb:2b:f9:60:a3:3c:de:ff:5a:5f:54:
60:2f:64:59:a1:65:05:a8:4a:87:e7:b4:16:b4:63:
cc:40:02:3e:78:1b:e8:43:0c:6a:b1:18:24:7b:be:
6c:fe:5b:8e:a4:06:ca:57:d1:fa:38:d6:51:fa:4d:
23:d7:32:57:78:52:12:c7:6e:37:3d:eb:18:5b:30:
10:10:c5:09:9d:7b:1b:ff:22:0d:14:1c:09:2e:00:
66:f4:f7:31:ac:92:60:18:0d:d5:42:14:dd:6d:91:
c5:5f:0c:13:f1:26:10:dc:87:a5:36:7b:7a:22:99:
49:e0:c4:4f:5c:ea:cc:47:f2:3f:24:84:5e:22:d3:
74:a1:b4:4a:8e:86:7b:3a:b4:94:70:5d:e5:0a:46:
a1:1a:12:87:e5:79:30:bb:f0:79:14:79:31:c3:7c:
8b:70:e8:20:c6:47:e0:34:fb:f0:b5:c0:5f:65:6a:
38:74:69:54:63:c1:95:44:bb:d4:dc:f4:a7:3f:2b:
41:a4:8c:3f:77:57:14:00:0f:b8:37:67:41:84:b2:
62:1c:89:17:73:ba:2a:04:b0:0d:e5:66:c7:9c:4f:
05:0b:0b:8b:ac:a1:64:12:6f:60:f2:85:e7:8e:c2:
4a:68:7a:10:51:28:81:c5:60:15:fb:dc:0b:61:7b:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:41:4F:95:51:75:40:BA:C7:CF:A4:39:7A:00:AF:B4:51:7A:94
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fc:53:4d:1c:11:cf:34:fc:86:24:19:18:da:35:af:74:e0:
76:37:6e:2c:5b:fc:9f:ea:3a:2d:fd:a0:67:80:8c:6a:b9:8a:
4f:ec:84:1d:ea:ab:65:98:eb:3a:37:26:88:da:c2:31:ba:bf:
82:02:79:5c:17:29:08:f5:1d:1a:f9:0b:c7:5a:aa:00:65:f6:
f1:63:8f:e9:ec:a0:b7:e3:27:36:6b:00:65:f3:37:86:3e:15:
cd:40:93:43:53:72:83:9a:51:77:5b:ac:f1:98:e4:7c:88:3b:
8d:7e:4d:d9:a3:f5:0b:22:03:e3:81:68:23:fa:75:cc:56:cb:
39:3e:b8:18:79:03:3b:3c:20:15:e5:a8:51:47:2c:16:ee:c7:
ff:f1:d8:a5:11:53:b9:16:db:6f:d2:4a:c2:85:1a:81:da:0d:
0e:65:9e:42:bc:c4:4a:bd:8b:6c:a6:31:db:e9:7a:c2:d0:25:
16:03:9b:8e:6d:e2:f9:67:1a:dc:83:55:6b:1c:39:9c:86:21:
42:25:5d:88:f4:79:d0:a7:14:39:35:36:5c:04:19:7b:ea:2d:
68:bf:c1:c4:f0:0e:f4:96:b4:f1:a3:3d:d2:0f:bc:52:9a:69:
60:f4:1b:36:ee:7a:e7:d8:33:57:ab:9a:7d:ea:7a:26:be:28:
b7:7f:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:49:02 2025 by rpki-client