Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
File: db3TijiDJA5GxLGsi7-DF96P-IU.mft (raw, json)
Hash identifier: CRa7N40xmuxxoqLXZ0ra7zlI9YLw/CTVROublmO7o4E=
Subject key identifier: AA:F9:4A:7C:B9:B0:F1:5C:3F:02:71:EE:86:6D:E0:82:B5:69:93:0D
Authority key identifier: 75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
Certificate issuer: /CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Certificate serial: 0197BBC6E4F8E868E14653C8FEB5B946F8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
Manifest number: 12C4
Signing time: Sun 29 Jun 2025 13:01:03 +0000
Manifest this update: Sun 29 Jun 2025 13:01:03 +0000
Manifest next update: Mon 30 Jun 2025 13:01:03 +0000
Files and hashes: 1: db3TijiDJA5GxLGsi7-DF96P-IU.crl (hash: ShfsBLVHsrWVr+YwLyBN3omFqRx9GlhXsLTn0Ru2jdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c6:e4:f8:e8:68:e1:46:53:c8:fe:b5:b9:46:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Validity
Not Before: Jun 29 13:01:03 2025 GMT
Not After : Jun 30 13:01:03 2025 GMT
Subject: CN=aaf94a7cb9b0f15c3f0271ee866de082b569930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:d0:6a:ac:2b:71:4a:b6:f7:7c:f1:0a:9d:
44:79:fa:fb:0c:e6:45:26:b2:a7:23:0a:ba:3b:54:
28:89:1e:6c:48:c0:ea:6a:05:c9:7c:dc:e9:fe:e4:
b6:75:7c:8c:ae:ff:49:4c:9b:fc:a8:6b:d5:e1:94:
f2:18:9d:d1:00:ed:c6:94:a1:22:47:3f:6a:dd:32:
97:81:2b:15:4d:7f:46:ce:ee:70:5d:38:5b:2d:95:
82:8a:97:97:19:f7:fd:26:32:f2:ba:74:65:31:43:
b4:96:ba:e4:fa:b0:6c:9a:52:d6:60:bf:db:54:22:
2a:5d:9d:8b:48:27:34:4d:e9:69:6e:78:46:b7:ce:
5b:31:fb:2a:06:46:9f:b5:14:57:30:52:05:de:55:
c4:4b:09:48:f4:e6:b4:27:e4:05:43:cc:7d:6b:d5:
c1:78:be:06:07:17:5e:f7:35:8b:6d:a6:72:1f:ae:
90:d1:1e:f6:6c:c2:41:d0:b0:26:26:2c:57:70:48:
e3:a5:97:5a:b1:da:41:a2:4b:c4:43:12:2a:26:78:
96:8d:b3:1a:91:91:7f:5b:0c:8a:7e:9f:93:11:3e:
5f:60:cb:1d:56:56:ef:6b:d7:a9:7a:e8:91:e0:df:
5d:99:68:99:cc:a5:3c:6f:9b:e7:6c:0e:20:e1:47:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:4A:7C:B9:B0:F1:5C:3F:02:71:EE:86:6D:E0:82:B5:69:93:0D
X509v3 Authority Key Identifier:
keyid:75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:29:fa:4b:69:40:2b:89:8a:44:5a:67:3b:92:1c:9b:b4:a5:
01:d6:76:ea:c7:1c:87:a0:25:b6:e8:c0:41:91:e4:51:98:a1:
c2:df:fd:49:87:cd:68:26:14:7d:53:d2:34:e3:1c:9f:82:be:
14:8b:6a:90:7f:ec:83:52:8a:0a:58:5f:e4:b5:d3:a5:e4:77:
04:fb:5b:96:89:fb:5e:84:90:b2:34:af:ec:85:0a:92:80:d6:
9d:73:4f:3a:2b:36:46:7f:a5:6a:71:4d:c1:27:1d:64:39:bf:
ef:c7:29:4d:97:2b:ab:6c:ae:f8:55:b7:4b:5d:58:e9:4d:6a:
cd:2f:da:96:e6:a7:38:e9:6f:68:ec:12:95:2a:05:39:fb:67:
a6:a6:5e:f8:ec:28:04:56:c7:ab:22:71:f4:4a:64:c6:69:6e:
08:8f:2d:c7:7c:41:59:37:a9:98:dd:0e:f6:fe:be:81:a8:19:
ea:2f:9a:78:bf:aa:75:e8:9f:49:c0:01:bf:77:72:85:15:55:
a4:d3:fe:aa:3a:ee:92:4c:00:0e:58:49:e1:71:d0:36:6b:1c:
26:67:c8:ee:97:26:65:19:b6:db:fd:58:76:90:51:9e:e1:ea:
df:44:46:85:2e:b3:2a:dd:b1:b4:44:91:5d:08:22:80:f1:6f:
2b:0e:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:10:40 2025 by rpki-client