Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
File: X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft (raw, json)
Hash identifier: ho3E/zFU/yps+3/0nbkM1QMLk5f21ccdMjFBovu4Iw0=
Subject key identifier: 44:EA:FD:35:82:80:D7:30:45:16:8E:55:F6:E4:D2:29:EA:2D:C1:29
Authority key identifier: 5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
Certificate issuer: /CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Certificate serial: 0197B6D795A5148F6B95FD585A31D96315BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
Manifest number: 038C
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl (hash: jH9BYGmxMxAvCr7WU0oC6US9y+CtSt+u6xXEb9splk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:95:a5:14:8f:6b:95:fd:58:5a:31:d9:63:15:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=44eafd358280d73045168e55f6e4d229ea2dc129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:61:ae:c7:1a:5c:2a:5e:62:50:b2:f7:ce:
0a:45:bb:9d:c5:3b:6d:79:61:5a:3f:92:48:4b:26:
8f:68:7d:31:bc:5e:4e:d8:af:08:96:f2:21:9a:e8:
b2:29:c6:0d:4c:04:6e:4d:ab:e6:8d:d0:d3:ac:28:
e5:7f:2c:29:8a:07:bd:0d:77:ac:0b:1c:44:d8:75:
2c:29:1e:88:fc:55:c3:64:a1:16:44:4f:5c:3d:c4:
de:ed:71:17:02:16:6f:dd:7f:e8:56:2e:ae:2e:42:
11:51:99:ef:c8:0c:0e:b5:4d:cc:f2:0c:a9:cd:5f:
3b:97:aa:43:0b:39:02:ca:94:6f:78:7f:d7:5c:64:
97:6e:ff:b7:16:c5:48:f8:d9:c3:d2:4e:03:f8:16:
fb:60:e0:45:98:23:4e:0f:9c:97:10:6b:82:17:c3:
8c:20:71:e2:8b:18:09:d4:0f:1e:62:13:63:82:72:
f3:f4:91:03:0e:a1:5b:80:1a:72:9e:7c:1b:b0:ad:
d6:72:59:be:60:21:a7:fc:f8:f7:f5:61:ad:bd:a8:
3f:55:17:8e:c9:02:6d:77:c6:fc:d3:fb:31:24:7d:
6b:9e:ba:5e:f3:54:03:c9:70:ca:79:7a:57:24:66:
4c:af:9a:39:3a:b7:2e:48:9b:1e:1f:be:74:0d:9c:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:FD:35:82:80:D7:30:45:16:8E:55:F6:E4:D2:29:EA:2D:C1:29
X509v3 Authority Key Identifier:
keyid:5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:56:a7:c5:99:21:2c:e3:14:a5:a5:ad:76:2a:c9:47:13:
27:49:d0:cb:f9:ef:00:fc:fa:25:78:22:0c:f3:ff:c7:d0:78:
5f:c7:82:50:f1:9f:bc:ae:cb:66:6c:8c:76:f7:28:98:4b:8f:
8e:28:d6:d2:c1:e1:d7:20:d9:f6:a9:cb:d5:d8:74:02:a3:c3:
0e:6b:69:2b:aa:38:03:6b:98:ae:fe:0b:e8:f4:c0:07:aa:15:
ac:1b:99:e9:d7:c3:a5:ca:a8:10:0e:b7:a3:22:14:e2:d9:5a:
cd:38:25:9f:c4:09:02:1e:1a:f9:45:fc:9b:19:bb:c5:16:f9:
38:be:86:da:92:4e:dc:15:c2:ca:8e:6d:c0:43:54:f0:d6:00:
a7:2d:94:64:b3:5d:3c:8d:2c:32:2b:47:cd:fa:4a:61:2d:64:
03:12:14:be:63:53:5d:43:3b:7b:a3:2e:7c:a7:8f:68:ff:87:
06:e8:87:5e:2d:34:db:f0:18:ec:da:80:ba:f0:7d:39:82:94:
26:25:c3:2d:b8:d0:a6:c9:fd:26:57:d6:92:06:dd:9f:6d:7d:
d5:93:aa:ee:50:69:19:70:3e:40:1e:82:4c:f2:5d:de:24:f3:
6f:89:2b:08:d6:08:16:2b:19:74:68:6e:a5:29:f0:17:69:5b:
44:0d:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:01 2025 by rpki-client