Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: 1Eq6dkxM1Uexx0cOwKMjDGyVqoVvTYEskfzNHw+yd9s=
Subject key identifier: EE:E8:90:84:6A:7E:67:09:10:E3:76:D6:74:B7:82:F9:B7:04:81:64
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 0197B6A0FC9F3CB8F994AABA6B8E264ACC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: vYUy+OzLHoe1W8jgV3TeP+N+OlVrlQE8RoVACEGp4HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fc:9f:3c:b8:f9:94:aa:ba:6b:8e:26:4a:cc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=eee890846a7e670910e376d674b782f9b7048164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:49:c7:8a:eb:9e:65:4c:56:49:0e:7c:af:
98:89:39:a1:b2:40:77:5a:db:ed:80:df:ea:50:48:
1d:3a:15:ce:9c:20:83:08:b8:7c:13:4c:23:b9:ff:
df:10:5e:65:33:7e:4a:c9:dc:97:62:62:81:7a:a8:
de:09:87:24:d6:0e:64:e5:3f:8a:64:7e:65:94:aa:
1b:f5:3a:eb:52:30:c3:a6:9e:c7:86:9d:9c:be:f5:
e1:ba:66:c9:37:3e:f3:22:a8:79:eb:dc:00:b2:50:
a2:cf:11:82:c2:f5:fa:7a:04:f8:59:ff:41:4a:d4:
65:e8:3b:ea:f0:cb:6c:15:53:15:a4:12:0a:c9:13:
f1:d0:9e:0d:d5:0b:78:dc:b5:b2:d2:d4:c5:5e:3e:
d7:01:b1:0b:fb:50:3f:97:d1:17:65:e0:21:be:5e:
fd:bb:0f:40:c8:8e:bd:c3:5d:6b:17:69:2e:d0:4d:
2b:8e:0b:e3:6c:53:65:78:53:38:1e:ae:aa:ca:3c:
aa:fc:76:79:30:69:69:79:80:56:21:08:2a:3d:19:
e5:de:ce:fd:f8:ac:77:cb:01:4a:e3:a8:b9:91:ef:
ca:04:26:fb:35:1b:ce:d2:7e:7b:18:81:a4:31:ed:
66:62:30:14:1a:4f:63:f6:52:b5:61:01:10:bf:1f:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:90:84:6A:7E:67:09:10:E3:76:D6:74:B7:82:F9:B7:04:81:64
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b6:a6:0d:80:ba:65:1f:38:08:72:63:ad:b9:91:2f:8f:f0:
dd:ad:4d:2e:7f:57:5c:a4:31:81:4f:17:87:32:64:fa:84:92:
29:e4:5f:6b:89:d9:e0:27:d8:c4:ec:83:18:03:12:72:2d:a2:
18:c0:02:31:cc:cc:1b:41:8d:5b:4b:b7:aa:09:9a:b7:b1:89:
2e:99:68:46:e2:4b:bf:09:4e:2c:7b:a8:72:1c:d0:8c:39:92:
2b:ce:03:4b:47:43:f0:01:ce:b9:63:1c:73:99:0d:36:fa:c0:
27:43:bd:13:42:9f:17:dd:3b:1a:0c:41:10:be:6d:ad:f5:2e:
34:b2:28:4d:fe:ad:1e:d1:92:7d:ec:96:07:e3:94:56:77:87:
44:c8:00:52:fb:db:35:a1:36:e8:7b:1a:10:49:ff:cf:ad:ee:
91:8d:8b:b5:05:84:f0:96:88:ad:09:e4:a5:2d:80:22:49:b4:
d1:32:43:28:3e:ec:d5:b2:ed:8c:e7:f1:b7:2f:0b:d5:5f:2b:
8a:9c:7e:65:3d:30:ed:d6:09:bb:ef:f9:1e:7d:12:76:eb:b9:
49:a5:f6:b6:c2:5e:b2:d0:37:b2:d3:23:0e:e1:87:70:8c:35:
10:7a:4b:7d:37:47:a1:84:3f:6d:50:1e:0b:04:72:b7:33:ac:
2e:6d:56:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:15 2025 by rpki-client