Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: A/qNrNobDdHYxBh10TLXsUt6x72tEk9ETW0PUaPUxNU=
Subject key identifier: 6E:A6:01:79:3F:78:70:C0:73:C7:8C:E8:EA:77:F7:78:02:9E:46:0C
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 0197B70E8AD73DA2D03C7616081160CF3330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 0A58
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: JMPRZtBdhomImXvGaymQ2OBVofCFvVpiIw0kiMuaEm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8a:d7:3d:a2:d0:3c:76:16:08:11:60:cf:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=6ea601793f7870c073c78ce8ea77f778029e460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:f0:7c:1d:70:9b:2a:47:80:45:44:05:f4:
65:48:93:56:7c:30:6c:31:32:04:42:11:0f:6f:25:
f2:b1:42:46:55:01:6e:14:5a:28:c3:a9:c0:3e:84:
4c:40:0b:f6:c1:14:ba:f0:c0:3c:de:49:a6:bd:f3:
1f:50:fc:c7:cc:e3:67:77:ed:9d:33:4e:3f:e4:9f:
6e:9e:52:2b:89:08:0a:93:07:21:43:73:81:34:11:
27:a0:8d:a1:3f:a1:40:c9:93:c6:c4:e8:1b:e2:06:
04:85:33:a2:9b:19:7c:88:2c:77:d2:a6:fd:a3:c5:
b2:c5:d3:ac:67:50:34:b1:60:aa:f4:da:40:80:ce:
12:ab:fa:47:08:9c:7a:9a:74:f2:8d:a6:f9:12:2f:
97:79:bc:3a:d8:db:dd:74:e0:a1:50:90:0b:32:da:
85:20:c9:16:cc:ba:f4:66:a8:ee:e0:72:90:e4:52:
f7:7d:49:10:8b:0e:02:d7:9e:fe:41:e2:69:bd:54:
25:e7:09:af:76:3d:3b:8c:21:f3:d5:75:64:2c:83:
38:db:85:61:d4:c6:8c:93:c7:9a:f6:10:30:a9:85:
64:93:73:9d:4b:d2:bb:9d:7a:80:0c:22:89:5e:f3:
46:7e:2a:84:63:1d:9a:b0:be:e4:38:92:38:0a:83:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A6:01:79:3F:78:70:C0:73:C7:8C:E8:EA:77:F7:78:02:9E:46:0C
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:05:b1:6a:33:45:78:6b:09:cc:d3:a4:83:11:ef:f2:c3:
68:8b:16:fc:1f:7b:ce:66:4d:36:03:1d:53:d3:e0:89:90:28:
c5:4a:86:13:7b:87:bc:cd:0f:1e:2f:dc:f2:dc:eb:ce:1d:c3:
e1:08:ec:79:9f:fd:a9:78:26:6f:b6:83:44:40:74:c5:e8:a3:
01:c8:06:36:63:38:52:c4:3e:c0:b7:05:ff:3c:ae:f2:f6:5c:
c0:86:b9:e0:64:5e:06:0e:e7:d5:c9:da:f7:ac:80:e4:ff:e2:
66:0c:40:5a:ac:47:5b:61:98:bd:6f:c3:ae:54:d0:e3:3b:87:
24:c1:fe:34:4b:f8:af:35:0a:c0:64:77:1a:be:f4:7a:e4:48:
d4:5f:99:e4:ea:46:b5:5b:43:01:c4:d5:ad:65:87:8c:10:ef:
87:f9:f6:3e:07:d8:38:53:0b:4b:bb:bd:49:1b:c2:8a:5c:f3:
da:08:ac:8d:77:f6:09:c4:98:ec:94:48:2b:29:c6:d8:0b:7e:
a9:49:05:d2:1f:08:09:d9:82:d6:af:bc:1c:f3:46:89:7b:40:
ea:b1:a8:fe:0a:1a:82:d2:d1:e4:55:77:21:fa:3e:f6:66:65:
37:d4:ec:4a:0c:82:d2:a6:0f:31:a0:4a:c3:71:8c:05:e4:4b:
4f:10:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:03 2025 by rpki-client