Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: 92cxzNfEeIpWPg6/M/KlfbceLzUulN1mDyCalK3MyuM=
Subject key identifier: B4:06:EE:20:88:58:7A:AE:32:5B:8A:EA:E0:FF:F5:7B:EB:06:0A:00
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 0197B88F16EF849D0EE107B75BBBE3740867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 22:01:14 +0000
Manifest this update: Sat 28 Jun 2025 22:01:14 +0000
Manifest next update: Sun 29 Jun 2025 22:01:14 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: 2LTtrVg0T/AFMyoPbGhCQoU27Li4pau+I4pU7x7K2gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:16:ef:84:9d:0e:e1:07:b7:5b:bb:e3:74:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Jun 28 22:01:14 2025 GMT
Not After : Jun 29 22:01:14 2025 GMT
Subject: CN=b406ee2088587aae325b8aeae0fff57beb060a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:25:a3:f4:cb:ba:28:b3:03:10:af:17:52:
bf:4c:e2:10:ea:11:7f:9b:a3:8c:1b:48:83:11:1c:
3a:c8:55:16:e9:e8:f5:60:73:8f:f0:76:d7:38:c0:
08:5a:73:f6:da:11:5c:4c:bd:6b:fd:72:0a:5f:b0:
27:ae:9b:e6:96:4d:8c:59:e7:9c:36:6a:d3:09:0b:
e1:db:51:e9:2d:b3:bc:19:f4:82:95:8b:ad:a2:14:
e3:32:a4:92:61:73:ef:a5:65:b3:9b:b6:18:83:49:
74:16:46:ca:84:85:1a:9e:61:05:cd:5f:a2:d7:5f:
5c:f7:10:ea:1a:4b:c3:ff:d8:94:ce:ce:7e:f1:8d:
cb:db:4b:56:0d:34:08:77:9d:3d:aa:8c:e7:1b:68:
0e:2e:ac:67:df:7f:a1:a6:33:de:b7:e3:81:50:7b:
92:68:6a:a9:a6:37:5f:47:20:93:d5:3e:a3:72:ad:
b6:16:a1:ba:ce:4f:df:2f:0f:2d:40:f8:33:fe:77:
3b:78:6e:49:a2:f6:65:cb:8c:40:f5:99:70:81:9f:
d8:e3:c7:cc:47:8d:11:79:c9:5b:34:a7:07:cf:77:
e2:0e:4f:7e:3c:63:d1:90:1a:4e:5a:29:64:69:da:
53:cb:cf:b1:b4:a0:f7:97:4b:de:81:ad:a4:c5:f0:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:06:EE:20:88:58:7A:AE:32:5B:8A:EA:E0:FF:F5:7B:EB:06:0A:00
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:63:ab:bf:d7:17:63:46:4a:c8:1e:00:4c:72:ce:d6:93:
df:ca:2e:53:f7:6b:60:23:6d:2f:bc:62:c3:55:6e:3e:59:23:
7b:d7:af:75:9c:47:c4:a3:20:03:5c:b6:1e:db:2d:dd:fa:27:
79:e7:d0:39:fb:fb:70:95:c1:47:7b:b2:57:00:01:0f:57:0c:
c4:e9:d7:87:80:f2:b9:28:84:62:c2:22:c0:ee:b5:22:42:30:
df:e0:24:15:c0:c6:93:77:74:ea:fb:85:55:16:e2:bc:00:2d:
45:88:6e:13:58:d7:36:c3:e8:27:5b:09:24:2d:6e:95:12:f6:
4b:84:a0:6d:69:06:07:96:8e:15:60:70:e6:22:63:70:84:1f:
7b:6c:c8:20:0d:4e:16:c5:a9:51:0d:52:b6:14:71:36:f2:ec:
a5:5b:4d:1d:60:14:a2:9c:27:6e:6a:dc:46:aa:da:99:29:5a:
e8:58:b0:ba:ce:cd:da:63:61:eb:2e:d8:82:82:45:a3:7c:7a:
bd:6c:4c:fc:39:30:e5:94:75:df:ee:fd:b6:f3:ef:60:1b:64:
27:8f:67:ed:94:5e:a0:2c:f8:4f:79:74:97:42:45:83:7c:ea:
7b:73:f8:2a:a9:94:e7:e1:41:db:7f:95:b8:5a:2e:46:bb:5c:
51:94:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:38 2025 by rpki-client