
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: hzyw/bhZq7wTvStG/lkfm0vU/rr2A4wgtJqKDwha2sM=
Subject key identifier: 1F:25:84:80:02:ED:8B:CE:D4:4F:7F:C3:34:81:88:A0:A6:EA:FC:AF
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 0197488C7D9C664364DB458A8CADC19628B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 078E
Signing time: Sat 07 Jun 2025 04:00:55 +0000
Manifest this update: Sat 07 Jun 2025 04:00:55 +0000
Manifest next update: Sun 08 Jun 2025 04:00:55 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: 6TpUhvInQdxquBxZMn6czSKkGo9JSTYTkxw7rXHdI98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:7d:9c:66:43:64:db:45:8a:8c:ad:c1:96:28:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Jun 7 04:00:55 2025 GMT
Not After : Jun 8 04:00:55 2025 GMT
Subject: CN=1f25848002ed8bced44f7fc3348188a0a6eafcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:47:6a:74:66:d1:eb:d4:f6:0f:87:64:9b:
31:6d:d7:36:4a:dc:fb:ae:67:cb:53:86:8d:75:e9:
b7:40:47:35:7a:98:a2:1e:1e:d0:66:20:dc:1b:f2:
19:7d:5e:fb:4f:d1:aa:c9:96:19:18:f9:e0:37:35:
62:29:27:65:53:b8:7b:41:74:d9:4e:84:4b:e9:72:
71:38:08:ee:e2:28:7f:ef:1a:75:2d:d3:47:26:a8:
c8:cc:6c:76:ac:25:9e:2b:20:03:3a:7f:86:e9:d1:
a1:ba:94:e2:e3:00:b3:d3:4d:66:f5:f9:b9:b8:8c:
2f:2e:35:ae:fe:20:88:96:8c:66:f6:83:72:05:36:
68:c3:7f:bc:e5:52:0d:07:79:f7:89:f0:6e:ad:54:
31:5c:29:03:64:c5:8c:c3:38:9e:4f:b0:3f:cd:d9:
87:24:b3:31:65:82:5a:12:8b:41:16:ef:9e:67:13:
1e:22:d7:61:57:9d:7f:99:01:bb:2b:53:0d:f0:16:
c7:60:3c:43:14:9e:3a:8a:68:21:1a:5f:8f:6e:4f:
08:64:8b:bd:6c:e8:25:32:70:d8:d2:a0:cb:bf:20:
14:8f:5b:bb:94:8a:f4:5c:53:e2:bd:91:ed:90:f9:
e5:cb:02:76:49:29:fe:87:ba:e3:ea:4d:6e:4a:00:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:84:80:02:ED:8B:CE:D4:4F:7F:C3:34:81:88:A0:A6:EA:FC:AF
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7c:6b:da:ea:02:f4:a3:8a:5d:6a:34:1f:6a:0e:b2:c2:f0:
c7:73:2a:26:7a:63:5d:0b:45:e0:ae:c2:cb:07:d6:81:04:7b:
e5:67:d8:07:ca:ad:5b:cd:e8:6d:ad:0e:ca:10:4e:4f:69:e8:
6d:66:75:34:40:cd:33:23:fc:5b:16:8f:c0:da:38:78:36:0f:
98:9f:c9:93:08:59:f8:e9:c3:7e:4e:20:69:f5:d3:f0:22:01:
cf:12:19:00:7d:f3:84:b5:db:cc:ee:36:98:52:1e:4c:d9:c1:
e3:0a:c3:21:37:c1:5d:7b:39:b5:95:2c:30:01:80:e7:8a:3a:
35:18:d7:b4:a4:36:b6:d8:b6:49:48:63:20:b5:8c:69:8a:45:
ab:82:50:da:52:b7:7d:48:49:2b:e3:4d:fb:be:30:36:39:3c:
92:2d:93:96:3d:66:8c:f1:db:4d:d0:eb:a9:17:2e:df:1d:73:
c1:12:6b:87:f2:7b:ed:6b:1d:30:3f:c9:f1:43:29:68:62:c0:
12:4c:e1:8b:d1:4f:52:73:c0:72:b7:bd:73:97:39:fd:d0:53:
d6:8f:ac:51:30:1c:86:1b:e3:50:81:3a:14:a5:5c:71:1c:c4:
34:56:2e:28:3e:14:35:28:ee:83:2c:26:01:22:36:55:a5:3a:
f4:f4:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:23 2025 by rpki-client