Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: JE50rimfzE9T4IDgY1oJjt8ryZHJTEEoIkZZON7EV6g=
Subject key identifier: C3:93:BE:98:7E:29:5B:E8:B5:61:97:2B:92:D3:0B:98:86:C8:FC:10
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 0197488D1F0809AA78D256C47457B60557CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 04:01:37 +0000
Manifest this update: Sat 07 Jun 2025 04:01:37 +0000
Manifest next update: Sun 08 Jun 2025 04:01:37 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: d7vsp8syaY3tSToB7y/NsQBRtzc/9MgvNnE0BqXecTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:1f:08:09:aa:78:d2:56:c4:74:57:b6:05:57:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Jun 7 04:01:37 2025 GMT
Not After : Jun 8 04:01:37 2025 GMT
Subject: CN=c393be987e295be8b561972b92d30b9886c8fc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:59:6e:e0:fe:56:87:a7:67:86:01:73:0b:
75:9f:3a:04:12:10:01:f0:64:1a:bb:5b:6d:f9:a0:
fd:e9:81:4d:12:b6:5d:c6:23:7d:27:ef:6e:09:8d:
d7:85:78:8b:4a:e9:f4:2b:be:c0:7d:a5:17:ef:9c:
b4:eb:fe:cd:f4:99:81:68:2e:b9:86:2c:bb:59:8d:
e6:5e:15:91:d8:6f:89:e1:54:d6:99:4e:a3:3e:84:
15:92:6c:bc:34:11:e7:cf:e8:3c:b3:be:ff:5b:07:
9b:4c:5b:91:08:ba:3c:23:f3:8e:d5:af:61:58:7a:
47:35:10:87:fd:c6:cb:e8:d0:4c:8e:3f:30:7f:d4:
92:6a:09:38:66:96:96:a5:74:6c:78:7e:7a:f9:7c:
57:74:f7:f0:1f:0a:af:de:cb:27:91:f4:b5:53:4e:
59:aa:f4:b6:22:e0:cf:37:e0:a7:8b:64:36:5c:5a:
da:0e:2e:4f:5f:6c:21:f3:05:b8:e5:9d:98:45:7c:
2c:d7:c9:8f:31:bb:a4:c9:fb:2d:3d:08:12:53:3b:
29:11:7b:ec:00:eb:33:f7:56:3d:8f:da:9f:db:9e:
37:91:6e:96:e6:03:a0:e0:32:2e:07:ab:78:68:65:
12:c9:b1:c8:ba:10:4f:01:da:6f:a2:b4:24:b0:ea:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:BE:98:7E:29:5B:E8:B5:61:97:2B:92:D3:0B:98:86:C8:FC:10
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:52:48:c1:2d:bd:6d:f0:e7:a0:75:df:14:b1:42:21:c4:9c:
e3:7b:96:39:f5:f3:a0:8f:d3:a7:e6:7d:d6:50:63:f5:cc:c4:
a0:d5:97:e3:18:da:de:47:dc:d3:47:34:dc:87:aa:2d:01:0d:
25:3b:68:af:19:43:a2:9e:ae:1b:31:02:c7:a8:73:43:bd:ff:
8d:49:a2:be:a6:21:66:69:1f:73:be:c1:50:7a:33:5c:8b:de:
e7:eb:3a:6e:7d:87:db:30:d3:70:63:cc:44:ee:4b:b5:1e:c4:
e3:64:51:02:b8:a6:7f:ba:0c:b8:a7:b4:d2:6b:15:6e:65:97:
df:db:6b:52:bc:7c:3e:f1:ae:62:07:26:2a:24:df:c7:50:a8:
1b:57:c4:4a:ec:65:8d:1d:28:38:e2:9f:6d:8b:a3:cd:24:2f:
25:fc:27:a7:76:fe:3a:8e:d6:68:c1:21:74:cb:e8:8e:50:4d:
0d:fe:51:98:0c:88:a2:83:e8:d5:9c:3d:dc:71:00:62:83:ac:
79:c3:8b:c2:c6:02:97:9d:cb:1a:17:34:4a:d2:27:85:91:4b:
a5:77:b8:70:c2:5c:2c:66:34:06:da:08:63:19:a8:96:55:fa:
8b:ee:79:27:f1:ee:fc:3e:14:b6:ae:9d:4b:a4:35:4e:57:21:
29:83:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:42:05 2025 by rpki-client