Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier: fuS2/2Ew/fiKb3LBFyug9znmc3w/Y10L44w2eLJzKa8=
Subject key identifier: 48:47:7C:11:A3:DA:36:AB:7F:5E:4C:DF:B1:75:36:56:95:6F:99:B8
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial: 0197B70E8D38C9A072A18C4F55E83D926369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number: 1090
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: c5NKGhugRYXU09z47CStpQ7lUnyGrfphbizpJVNaD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8d:38:c9:a0:72:a1:8c:4f:55:e8:3d:92:63:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=48477c11a3da36ab7f5e4cdfb1753656956f99b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:e1:44:25:11:a2:2b:74:7f:c6:42:bb:1f:
79:9c:59:67:d0:44:b9:5a:a0:0a:e2:0a:83:9e:f8:
2e:68:ad:d1:f0:82:85:f8:c0:7f:c3:bc:31:1e:ce:
8b:bc:83:83:00:4c:66:b2:83:43:71:f0:54:8c:8a:
8e:ec:ec:f2:be:81:8c:2e:a3:a0:91:d0:2b:14:2c:
54:61:3f:ea:12:9a:28:7c:15:a5:ff:82:00:8b:c6:
00:c3:1a:fe:e1:a8:4c:b3:6a:2f:31:8e:61:fc:e8:
18:00:8d:8e:9f:05:11:f1:ea:15:47:e9:fe:70:9b:
27:89:8a:d9:df:3a:e6:00:9b:49:08:16:c3:e5:de:
32:1a:c9:9f:50:a1:e4:f6:43:58:f2:14:4b:2f:88:
a7:5f:b3:df:31:3a:e9:f1:c9:db:49:df:99:9b:fd:
a2:2f:3a:20:c3:0a:5b:6e:e8:c7:16:e5:e7:b4:f1:
0f:8f:79:d4:f7:71:2f:92:70:8d:39:1c:11:32:a3:
4c:c8:f8:59:9d:6d:61:d0:5d:cc:eb:a0:f3:46:04:
98:c6:e4:dd:26:5f:81:2e:2f:53:f0:5d:6b:90:71:
81:cc:95:44:a5:c3:c0:2e:ff:bb:27:24:db:f6:c2:
55:a8:d1:b4:0c:6c:0e:4f:2a:de:6e:88:0d:92:e6:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:7C:11:A3:DA:36:AB:7F:5E:4C:DF:B1:75:36:56:95:6F:99:B8
X509v3 Authority Key Identifier:
keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:ac:1e:3e:82:b3:25:56:b9:59:03:76:d0:49:a0:cc:68:
94:86:bd:fb:01:e7:e1:47:8d:8f:63:83:8d:e9:54:ee:d7:cc:
65:ab:dd:a2:0b:a9:c2:38:33:6e:78:17:d4:9f:5c:91:7c:c9:
57:18:fc:20:26:bb:e9:d7:c1:b2:b5:cf:97:50:79:4f:16:af:
2a:50:e7:72:ae:81:1d:af:0d:52:b2:b1:0a:cd:91:ae:6b:af:
64:03:39:05:5d:e6:2e:2e:c9:a8:f1:60:84:4d:1d:d1:20:e6:
ba:83:20:47:2f:13:38:e9:7f:2d:46:b6:91:57:5e:e5:65:a6:
14:56:48:46:3d:e2:a6:95:9b:0b:a4:e9:5a:0d:9f:5a:87:52:
bd:40:3c:ff:c7:ee:98:b1:9b:1c:50:b7:a8:9d:c9:7b:c7:4c:
90:c8:be:09:36:94:ba:17:82:41:5f:dd:97:6f:a9:33:cd:d7:
64:5e:d2:58:c4:3c:02:21:c8:08:73:11:df:1b:dd:d9:5f:36:
f9:0e:27:a4:41:73:36:00:ec:5f:73:a8:e2:2b:78:d4:0b:c7:
0d:a3:2d:67:13:0e:e7:c3:ff:60:63:83:d0:75:ae:33:ae:76:
36:9a:21:d6:9c:27:01:e5:14:5e:81:bd:95:db:c2:11:53:1c:
bb:4d:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:44 2025 by rpki-client