
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: KBJjO8XSZVSMj+PiEp6+HtE/4BiJJUBuX9jG3eBtoUA=
Subject key identifier: 9F:5F:4B:0C:F1:0E:59:77:E6:B9:87:5F:83:7C:43:0E:41:C0:85:36
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 0197B6A15B9FDC51A37FFA2A1A0DEDB07150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0750
Signing time: Sat 28 Jun 2025 13:01:57 +0000
Manifest this update: Sat 28 Jun 2025 13:01:57 +0000
Manifest next update: Sun 29 Jun 2025 13:01:57 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: lHt5tR8fFiWav1S7Yso+twuw3nF1gtZ5dEoVqfke5Ys=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5b:9f:dc:51:a3:7f:fa:2a:1a:0d:ed:b0:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Jun 28 13:01:57 2025 GMT
Not After : Jun 29 13:01:57 2025 GMT
Subject: CN=9f5f4b0cf10e5977e6b9875f837c430e41c08536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:eb:5b:0b:70:56:91:01:f0:b0:d4:5b:08:
fe:58:97:87:75:e1:1d:d3:2f:fd:90:9d:54:0d:d4:
9e:63:92:f9:33:f4:fe:c4:5c:88:67:31:d4:5c:ff:
88:ae:cb:48:80:58:b8:64:66:a3:3d:24:16:64:48:
96:2b:09:42:bb:8e:6b:98:fe:0a:74:c6:35:1d:31:
30:61:f8:a2:67:19:3f:6d:31:97:ed:3e:ae:b4:84:
51:4b:76:76:5a:7d:5b:fd:27:24:30:80:9b:a7:55:
85:5f:23:69:28:c4:fe:14:72:0d:f7:42:ba:ee:d4:
07:31:c1:20:23:fe:39:a7:96:8e:5c:65:d1:29:9a:
a0:2a:c9:13:a7:f6:e5:69:d2:55:5d:05:ac:c1:95:
66:7c:36:77:f7:d0:12:30:ae:61:26:a8:27:45:69:
8f:a3:a1:9c:60:90:60:01:dd:b0:a2:ce:31:d2:e6:
d4:8d:f7:0f:20:cf:bb:bb:23:db:18:4f:e5:e4:69:
6d:0e:8a:fe:e6:8e:f4:e7:be:81:29:d6:d3:06:44:
93:7e:7c:60:03:76:f2:1e:0e:65:e0:16:7f:a2:12:
3b:65:74:8f:82:01:3a:2b:a6:9f:a0:84:c9:38:eb:
4c:6b:5f:d5:87:e5:ad:e4:95:02:01:bd:76:b1:5b:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5F:4B:0C:F1:0E:59:77:E6:B9:87:5F:83:7C:43:0E:41:C0:85:36
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:83:a5:17:7b:9d:07:2b:26:ae:7d:0a:02:08:c0:a1:be:
08:38:aa:f9:0d:4b:ef:bd:f8:26:c8:ba:46:ca:27:c9:4e:60:
cc:b0:ef:84:cc:28:36:24:6c:09:e6:7c:9b:1b:73:bd:fc:a0:
37:4f:89:2f:b1:b7:25:81:2d:fa:c9:56:77:71:06:a4:9c:ac:
b0:f7:4d:2f:02:e9:99:59:89:9a:43:7c:40:55:4d:f8:0e:c6:
21:2e:2a:34:ea:12:e9:68:2a:88:02:92:74:4b:e5:db:1b:0e:
ba:db:f9:b8:e4:40:5d:29:b3:0b:1d:17:11:5a:5b:a7:10:23:
b4:dc:22:3f:aa:4b:4b:e6:7e:9c:b8:a6:89:6a:1b:63:7a:b5:
4d:e9:75:cd:c7:c2:04:32:f7:56:58:41:d3:16:19:54:a6:50:
19:5a:3d:6f:ac:91:cb:2f:7e:88:bc:1c:53:18:40:45:36:19:
56:e4:1b:b7:45:bf:39:4c:9b:80:33:8e:5f:60:cc:39:ac:76:
57:52:07:6f:18:13:7f:fc:7f:d5:72:31:86:e0:46:61:75:fa:
e8:19:8f:54:5a:a2:ce:cb:2d:37:1e:a6:74:fe:46:be:79:39:
15:13:16:b6:0f:79:a7:a7:98:b8:df:bb:e5:2c:b2:46:41:b0:
b9:67:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:04 2025 by rpki-client