Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: bpecVk2cFNRhzAxSUuGFZnGWZWDecYuJBbZTEVqLP7g=
Subject key identifier: 03:7A:83:13:96:F7:2F:5B:59:EE:E6:E1:92:94:09:73:2F:4D:49:5B
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 0197B82124457EEB9E06BEBA343EE2651361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0507
Signing time: Sat 28 Jun 2025 20:01:08 +0000
Manifest this update: Sat 28 Jun 2025 20:01:08 +0000
Manifest next update: Sun 29 Jun 2025 20:01:08 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: cxm9ukFmZBDLeij1iOs1fX0B3ysVRQ1oL8a2/Xdg7x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:24:45:7e:eb:9e:06:be:ba:34:3e:e2:65:13:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Jun 28 20:01:08 2025 GMT
Not After : Jun 29 20:01:08 2025 GMT
Subject: CN=037a831396f72f5b59eee6e1929409732f4d495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:e1:02:82:c3:42:52:de:04:16:ff:0b:c8:
e2:a0:d7:5b:b9:99:7a:c8:e1:4f:e4:86:ea:8e:86:
8f:85:80:ff:ce:b8:f7:bd:93:aa:c2:a3:3d:90:90:
85:d5:0f:53:a8:58:d8:a9:0c:0e:a6:7f:dc:c2:73:
20:c7:1b:78:e2:ba:73:e0:2a:70:af:bd:31:cc:c1:
ce:59:4f:95:60:ad:fb:c0:3a:dd:c0:ac:32:28:22:
47:77:2f:2b:f2:af:ed:d7:3a:94:f8:d6:8b:f0:56:
07:a3:5c:60:be:e0:51:7f:ed:0c:a1:c5:f1:63:16:
e9:0e:1a:4f:fa:89:df:22:a3:2a:11:ba:f0:20:22:
29:be:01:90:f0:f7:d3:4c:85:6c:66:d2:70:1a:92:
82:a5:60:81:19:cb:8d:dc:b2:39:86:1c:20:bb:7a:
e3:7d:36:cc:1f:23:58:e1:db:15:bb:1d:b4:0d:e4:
59:d3:90:a2:d7:ab:7a:0c:10:6e:98:42:a0:a0:78:
ee:d5:72:f5:96:18:43:15:0c:5b:b0:71:a5:50:7b:
a4:44:52:c6:22:0b:33:cd:75:1c:ef:ee:c2:4c:33:
18:28:69:64:d6:cb:fa:3a:a9:64:d3:d0:58:84:cc:
89:df:68:9f:c0:8b:94:87:ad:2c:c7:e0:5a:99:21:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7A:83:13:96:F7:2F:5B:59:EE:E6:E1:92:94:09:73:2F:4D:49:5B
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8b:88:db:c9:49:f6:a2:4d:80:1a:71:17:d6:3d:e2:30:62:
17:f2:bd:04:ad:05:be:11:33:e3:cf:f7:fd:57:79:8c:3d:5d:
19:39:31:88:14:41:dc:59:b7:9e:c7:97:07:0e:d5:5e:45:75:
b7:aa:be:f7:15:79:16:f9:5e:52:b3:44:72:ab:50:af:d8:4e:
c4:cc:8d:fb:bf:20:bf:db:c6:f5:7a:16:0a:ce:8f:eb:f3:5d:
f9:92:f2:91:1f:cc:7d:05:95:07:25:61:58:82:ea:01:1a:88:
b5:e5:da:0e:8d:66:1a:78:9d:00:f0:d9:29:03:a3:a4:5e:20:
00:79:fb:66:9e:d6:b2:8d:73:1b:e1:71:12:86:78:dd:44:49:
a9:2b:9c:22:1a:7f:fb:1c:a8:f9:e1:55:7f:74:90:cb:e4:bf:
0a:77:0c:05:38:1e:97:54:d5:34:43:f8:2a:a0:10:b9:42:6a:
9d:63:13:d2:ae:21:ff:b9:99:49:a1:36:46:ee:49:bb:14:19:
a5:24:05:b0:10:1c:39:1c:9e:27:86:a8:f7:5e:b0:db:74:e9:
c9:99:5b:b3:9c:92:d0:cd:78:10:a7:01:25:74:ef:ee:51:3f:
28:f3:32:c8:c6:df:f6:18:dc:eb:a8:b8:27:95:e2:4a:eb:c6:
fb:b9:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:22 2025 by rpki-client