Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: 7BrWGe/eCk2PWJ+TRPSZAXy7ZEMrUxum6/QAJFc9opU=
Subject key identifier: 3C:19:31:B7:0C:5D:9C:2D:E4:44:CE:A0:86:C7:09:D1:B2:49:99:2C
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 0197B5FBB46D8CA8C11726E2B7BD2FDF6A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 0E2F
Signing time: Sat 28 Jun 2025 10:01:01 +0000
Manifest this update: Sat 28 Jun 2025 10:01:01 +0000
Manifest next update: Sun 29 Jun 2025 10:01:01 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: TXMVGr4woz1+f1DJssaeT1jh6A0x4fKY3n2W9xyfqok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:b4:6d:8c:a8:c1:17:26:e2:b7:bd:2f:df:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Jun 28 10:01:01 2025 GMT
Not After : Jun 29 10:01:01 2025 GMT
Subject: CN=3c1931b70c5d9c2de444cea086c709d1b249992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:a4:19:53:3b:5a:10:ec:85:49:3b:2e:f2:
c8:b3:11:dd:a5:47:4a:95:62:c6:f9:64:91:b5:80:
4d:65:6b:78:5d:fc:bd:e7:70:40:f6:75:f9:6b:18:
aa:13:5d:3e:30:d7:40:43:39:ff:cb:f6:bb:07:44:
98:53:b5:3e:88:d4:b4:e5:32:1a:58:3b:c5:1a:a6:
f6:e2:e8:81:53:62:91:50:ba:a5:ec:db:83:7f:5a:
43:9a:c7:5b:05:76:90:be:98:1e:2d:b6:4a:21:7f:
7d:7e:b1:d7:85:28:a7:c0:8e:64:34:37:a6:01:aa:
46:fa:e1:3e:82:e2:3e:fe:93:1f:42:50:f4:64:a1:
b3:37:54:7c:38:81:90:5e:36:3f:22:e4:ab:16:36:
b6:96:f0:06:fa:b1:62:fb:50:bc:e8:0a:38:fe:6e:
cc:52:7e:0d:be:54:63:2b:db:29:e8:60:d4:df:ee:
83:61:a4:55:29:04:e9:74:33:1c:ad:7a:79:7a:99:
3b:f0:59:50:65:ea:79:ad:c5:2b:c6:98:3f:a8:3c:
1a:3b:cc:b9:f9:b5:de:9a:c2:e6:d9:c9:2b:63:31:
1d:7c:40:0c:95:1e:e5:33:09:3c:b9:f8:31:df:93:
33:9b:50:40:b6:4c:df:a4:9d:54:7e:2b:73:4e:75:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:31:B7:0C:5D:9C:2D:E4:44:CE:A0:86:C7:09:D1:B2:49:99:2C
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:2f:45:b8:36:2d:7c:ee:80:13:c8:5b:a6:93:08:de:c3:
af:7a:63:56:82:da:94:63:dd:97:9f:7b:05:8f:42:db:6e:19:
55:12:b6:e2:c9:d7:91:3f:dc:43:06:55:0a:48:75:25:34:0f:
5b:d0:75:52:f9:df:95:65:d2:16:3e:16:b4:af:33:80:68:d2:
59:cf:df:e2:a1:bc:1f:02:f2:a2:11:ca:51:f4:5a:bb:27:4a:
68:03:0d:f7:9a:60:37:d2:c2:27:11:9c:cb:aa:c5:3c:d3:dd:
8d:fd:24:5f:37:7c:00:ed:54:00:9f:d2:34:ab:72:71:b9:2b:
a1:13:7e:5f:ed:10:b9:38:ff:51:aa:db:98:af:b1:70:28:24:
ff:d3:89:1b:08:82:4b:2c:a7:8d:77:8b:30:ca:c3:c0:62:f0:
63:4f:8a:d8:23:9a:b2:13:b2:14:7f:c7:c3:19:30:92:f7:49:
aa:10:4f:8d:07:22:ab:b2:9e:50:a1:84:18:67:15:e9:8e:8b:
48:0d:90:e8:62:53:52:37:05:7b:86:eb:52:47:10:8b:de:fe:
ba:5e:73:1e:60:78:7b:3d:37:06:2d:c2:7e:d0:49:67:1b:f0:
72:64:43:76:57:a5:3e:51:6f:55:71:be:a1:0d:0b:f3:95:ae:
c3:4b:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:40 2025 by rpki-client