Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: W47xaspg2+1iwkCeCyCcHJkOwKpo71L0mrg9c+hS38o=
Subject key identifier: 51:24:27:29:1B:7C:B9:DE:F6:F9:01:9D:A2:6F:E9:F3:4E:BD:42:E7
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 0197B8FD8D9CAC42A19ED28C58E6128AF10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 05EE
Signing time: Sun 29 Jun 2025 00:01:53 +0000
Manifest this update: Sun 29 Jun 2025 00:01:53 +0000
Manifest next update: Mon 30 Jun 2025 00:01:53 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: gVhHzmP0OCgVV+TOFyrcUaKcijiSIsq0xdmjMGkbIj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:8d:9c:ac:42:a1:9e:d2:8c:58:e6:12:8a:f1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Jun 29 00:01:53 2025 GMT
Not After : Jun 30 00:01:53 2025 GMT
Subject: CN=512427291b7cb9def6f9019da26fe9f34ebd42e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:2c:03:97:81:d2:22:6b:74:6b:04:f8:3a:
f0:c3:ee:31:3b:5a:6b:be:fd:06:f3:0f:f2:c9:92:
f4:b1:b5:ba:8b:bf:ba:af:73:16:9e:7d:89:24:f7:
2e:81:62:e0:2a:5f:20:13:dd:6a:a3:e5:3e:2e:b9:
8b:93:4f:97:44:2c:7c:50:bc:3f:1f:44:81:f7:d0:
41:2d:db:e5:50:ac:57:4b:dc:33:d5:0a:0d:69:e1:
9f:26:21:c8:16:61:b5:b4:65:20:86:35:6a:93:0d:
e8:d9:d8:ad:f4:6a:c9:70:0a:38:a8:d4:39:3f:29:
7f:2b:52:22:f7:5b:ff:d5:3f:d9:db:cd:59:43:3c:
31:61:84:c9:16:55:02:c9:52:5d:0f:3e:3c:6c:21:
85:09:eb:85:eb:4d:af:2b:a6:75:6f:9c:b6:6e:2a:
af:2c:6b:01:28:97:49:19:e6:91:8b:4f:2f:e4:09:
c6:98:84:bb:43:6e:76:80:7c:32:bb:ec:af:8c:ae:
f6:45:9e:de:90:22:98:89:d6:e0:1d:be:fb:c0:0a:
55:a8:0f:4f:c4:af:b3:f3:7f:cc:e9:0b:90:aa:64:
5a:af:43:4c:8a:b9:39:e0:90:77:8c:16:45:2a:6d:
bf:f7:d7:42:e9:0b:6b:8b:9d:e0:b0:61:59:6f:12:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:24:27:29:1B:7C:B9:DE:F6:F9:01:9D:A2:6F:E9:F3:4E:BD:42:E7
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:5f:1f:8d:2b:a9:a0:b6:16:80:6e:e9:3c:a5:26:10:3b:
28:39:89:e4:c0:57:b0:9b:a8:e9:b3:ab:fb:ff:fb:be:1e:08:
8e:e1:09:60:bf:9b:43:01:60:42:18:91:dd:af:d5:c3:50:cb:
b6:bb:03:3e:d9:a5:e1:e8:1e:93:8f:a2:7d:79:f9:cb:55:de:
47:b5:95:a6:1d:8a:85:aa:12:3b:ef:39:08:8a:68:dc:d9:4f:
80:25:e9:f5:26:0a:58:ab:67:8a:a5:01:66:66:16:24:47:2f:
ce:3c:62:b4:73:8e:25:2c:cb:9c:c1:48:c1:30:cb:44:75:e3:
23:61:aa:fa:2a:b5:51:a8:5f:20:b6:1f:02:7b:3c:72:76:e8:
c2:d1:7e:f9:ea:b7:e1:67:f1:81:f3:3e:3c:68:13:65:5b:d6:
90:1b:35:f0:eb:2b:fd:f4:3e:ea:7f:d9:f8:7a:5b:39:be:97:
b3:7c:72:1f:ed:45:be:43:75:f2:01:25:f6:a8:fa:91:be:28:
0b:a0:cc:3b:7d:e2:ad:51:06:da:19:6e:86:83:f0:c5:e9:b8:
0a:32:c3:53:da:5e:60:bf:3c:33:69:d8:f6:10:13:2f:16:dc:
3c:e3:5b:56:f4:82:59:c5:8d:de:f0:01:f5:23:02:f2:56:30:
da:b9:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:41 2025 by rpki-client