Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier: Ye+WQygfgcb5gIcRgTaN0EEaA2Un4DWQwPbHU/k7SfI=
Subject key identifier: F3:57:DD:74:C2:1C:CD:7B:E4:19:CB:6F:50:35:5E:D7:3B:79:6E:16
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer: /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial: 0197B6A1F35D27D076636444B996A7599329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: ct71gYkiFDQiBRQozf5VP+PnWQHHW6K709rGpPzSZro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f3:5d:27:d0:76:63:64:44:b9:96:a7:59:93:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=f357dd74c21ccd7be419cb6f50355ed73b796e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:7f:16:ba:25:18:a6:6b:37:89:9a:f8:b8:
19:97:58:69:1b:95:6e:bf:83:6c:11:1e:cc:4f:a9:
94:09:73:d5:a5:46:c6:35:25:61:fb:c0:56:81:91:
c7:a9:68:88:d3:d1:8b:4e:8e:31:93:b1:78:47:77:
87:58:2d:05:61:86:ae:9c:54:52:47:f8:72:72:52:
90:04:11:d6:10:6a:5b:4e:5d:b9:86:0b:b9:f2:9d:
a6:04:50:3e:1c:5e:46:b3:6e:dd:23:a4:15:4e:9d:
f1:70:75:af:4e:ef:f3:c0:45:e4:17:28:9a:25:00:
d6:60:42:4b:2a:52:f0:7e:67:6a:48:d4:85:9e:01:
c7:7b:29:9c:f1:8e:95:8c:81:c2:b3:67:b5:74:70:
f0:41:53:63:eb:38:94:ba:9e:a4:4b:26:af:59:61:
08:57:e5:29:37:7b:e0:2d:19:82:ea:16:5d:74:86:
ef:c0:6f:b9:95:17:eb:0f:85:de:e7:ec:b4:d9:52:
74:72:b6:83:14:22:f8:c8:fa:ae:49:d2:fe:e3:39:
a3:f9:6f:1e:1a:1d:1c:b3:db:4d:e0:0b:2f:d1:48:
05:5a:67:62:13:47:73:2f:64:37:c4:c8:a5:65:34:
46:b8:25:96:77:38:76:3e:d1:a1:24:d7:eb:68:26:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:DD:74:C2:1C:CD:7B:E4:19:CB:6F:50:35:5E:D7:3B:79:6E:16
X509v3 Authority Key Identifier:
keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8e:38:53:4e:4e:aa:cc:30:8a:7e:b9:94:83:f0:0a:a6:29:
64:8b:2d:ca:e3:02:0b:56:75:ec:cc:cd:e7:69:5d:78:c2:fc:
3b:2c:1c:5c:67:2e:4a:0c:e8:e5:92:88:39:b8:e1:90:5a:e3:
ef:a5:a4:0a:28:56:54:43:13:2b:06:6b:24:62:2c:b1:bb:9f:
6e:da:be:4d:50:92:e8:17:77:91:18:cf:51:2f:e7:47:86:66:
ce:e7:30:6f:23:56:14:67:18:a8:c8:40:5c:ee:76:88:68:24:
13:95:ea:ed:e7:97:ce:a2:64:99:ad:b7:c5:ff:a3:ed:fb:f6:
9f:d4:2a:dd:8b:b1:20:b0:92:ae:50:dd:1d:d9:ed:99:da:5a:
f4:37:67:db:6a:26:05:4b:b8:c7:0a:8a:3d:47:cc:58:cb:d5:
ca:d7:c3:67:ce:28:48:80:51:d8:f3:97:f1:f6:34:bb:2a:15:
da:2d:ff:b2:79:c3:37:7c:95:66:cc:e8:53:d1:26:b4:1d:7d:
39:3c:ae:09:36:53:b4:56:f3:5f:3a:3a:c6:c5:11:88:74:0e:
29:17:a4:33:71:83:c2:17:50:d8:9e:b9:71:7d:0b:85:88:66:
1d:42:b6:60:d1:91:7e:b3:62:62:f7:46:02:7b:93:50:b8:43:
01:fd:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:47 2025 by rpki-client