Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
File: C53uHUCq19-1viY4ApT04HcD14Q.mft (raw, json)
Hash identifier: K+INS+eVTxmAaYMXYyqSXpf/1/Bi1m4XrNthcBvN/W8=
Subject key identifier: DF:BD:4E:3C:C7:30:D9:77:A6:64:CE:58:8A:F2:8D:2D:6E:38:8C:16
Authority key identifier: 0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
Certificate issuer: /CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Certificate serial: 01974D449AE477BF1CED616029C69EC7C1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 02:00:31 +0000
Manifest this update: Sun 08 Jun 2025 02:00:31 +0000
Manifest next update: Mon 09 Jun 2025 02:00:31 +0000
Files and hashes: 1: C53uHUCq19-1viY4ApT04HcD14Q.crl (hash: /wlQhl+sBd1q9Q1/Q70PiN3I63Bdk5r477n5EM3QDOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:9a:e4:77:bf:1c:ed:61:60:29:c6:9e:c7:c1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Validity
Not Before: Jun 8 02:00:31 2025 GMT
Not After : Jun 9 02:00:31 2025 GMT
Subject: CN=dfbd4e3cc730d977a664ce588af28d2d6e388c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:b2:0e:15:8a:a4:e3:44:89:16:42:e1:39:
18:29:b6:a6:8a:b2:98:ab:fc:f3:f0:ca:cb:c0:b2:
52:aa:4f:78:32:62:ac:55:d9:7c:18:c1:ed:fc:db:
b4:09:ae:58:cf:da:05:77:cf:b6:e0:37:44:53:9c:
c3:f8:b9:62:28:87:44:ed:f9:c6:3a:a5:7c:29:77:
bc:89:49:d7:00:4a:52:a2:2a:94:b5:61:ab:50:89:
0f:ca:9f:79:9f:70:f0:48:af:e0:11:03:20:5c:32:
e3:4c:03:70:72:86:5d:25:18:24:98:ab:77:ec:5c:
e0:65:48:61:d7:f7:40:0c:6c:b5:20:a8:66:8f:ef:
63:66:e0:f3:6a:6d:a2:d4:cd:d9:ec:ae:71:ee:10:
94:ab:a1:cb:66:e1:45:7f:ad:e4:d0:52:36:5f:cc:
2a:aa:98:9f:01:fd:3d:5e:2e:44:03:9d:23:0c:fb:
52:22:14:a8:0f:b5:55:70:2a:49:e5:87:e9:7d:41:
66:fa:fb:6d:78:38:59:10:c7:f9:bf:e1:c7:48:9f:
6c:46:db:4a:6e:c0:16:13:7e:08:a7:aa:1a:f5:c7:
61:53:46:53:46:99:ef:ba:c2:e7:71:8a:67:39:29:
40:48:97:d5:fb:5e:85:2b:9a:50:06:19:3c:0a:0e:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:4E:3C:C7:30:D9:77:A6:64:CE:58:8A:F2:8D:2D:6E:38:8C:16
X509v3 Authority Key Identifier:
keyid:0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:83:b2:35:de:57:8c:d2:39:ad:e7:59:38:13:5b:5f:23:41:
a0:3f:41:11:3c:41:11:7a:e4:6a:5a:ef:cb:fc:27:9e:bc:a9:
68:5d:95:b6:88:41:c2:ad:92:d3:80:7e:29:fa:45:d3:21:31:
2a:6e:12:bd:76:f3:2a:60:1c:ac:34:a4:ed:ab:17:f6:b3:48:
dd:09:d8:e7:3f:8e:0c:e9:70:de:29:1c:b5:38:19:0a:d1:89:
da:d1:f6:47:bb:76:38:ee:2c:1c:16:7d:ec:6b:bb:81:ab:eb:
5c:75:9c:fc:72:4f:0b:57:59:2a:4d:45:02:21:39:55:5c:7a:
95:6e:a2:43:db:3e:bf:4d:fb:c5:1f:85:da:a1:f4:53:92:97:
55:a7:83:d2:33:44:a8:9d:d1:7a:0a:28:64:b2:7d:e5:8e:5f:
9d:7b:34:33:94:1e:fb:3e:73:7d:d4:8a:8e:8f:85:7d:40:6f:
a5:af:ba:4b:e7:f0:bb:84:17:49:75:72:29:ea:38:1e:21:0c:
aa:e7:fa:b2:75:16:ff:78:c4:a9:ec:68:f1:67:63:b7:46:7d:
aa:bf:c0:c8:af:7e:d6:5d:0f:24:fd:5f:3f:37:51:8c:67:6c:
3a:17:ec:b7:ec:0a:82:7a:be:09:87:76:a5:19:31:cc:c2:8d:
52:4e:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:08:28 2025 by rpki-client