Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: 5TnBawPGS822skx3NepYt3gIydJc3HQ3WCQVVhuwgrY=
Subject key identifier: 17:46:35:6C:AC:42:82:12:3F:5A:93:61:60:B3:38:29:9B:B9:15:28
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 0197B6A0D01266A65FA8FE2F400E4513801F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 07C7
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: Zd6NkbTLpFO7hWZwEDn+o4L9M5COZVJVOJHsvP0b/fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d0:12:66:a6:5f:a8:fe:2f:40:0e:45:13:80:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=1746356cac4282123f5a936160b338299bb91528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:e1:7e:2d:99:17:f1:13:d1:55:dd:1c:74:
54:ee:5b:81:c6:cc:b6:8f:2e:b9:85:42:c8:0c:77:
d6:8e:88:cf:fa:a2:51:1e:30:61:43:1b:cf:59:f8:
dc:8a:bf:d4:e8:84:b6:29:21:eb:b5:9e:ed:9f:68:
20:f6:9e:b2:9a:22:82:f0:b8:65:c6:dd:7e:1d:c3:
0d:46:67:d8:26:07:ae:02:c4:b3:43:f0:bb:9c:26:
94:84:ab:4b:db:35:1a:29:39:6a:d4:38:63:23:e9:
92:1b:aa:ce:97:8b:c3:f5:99:d3:ad:0f:11:7b:21:
a6:3b:2e:15:88:60:db:ca:78:14:4b:2d:e0:56:e7:
4f:bd:1c:55:07:77:b1:c7:72:14:1d:95:c7:8d:02:
9b:7d:5c:86:99:04:ee:01:7c:e6:42:0e:7e:02:90:
9a:8f:ec:cc:dd:49:20:a4:38:eb:9d:24:0f:5f:e9:
87:9d:3f:99:ed:e4:82:35:4c:af:4c:5e:6c:6e:2c:
4e:45:62:bb:1a:5d:c2:d8:95:de:ec:15:29:41:20:
4b:75:f8:2c:52:08:2c:50:f5:da:2f:84:3f:e5:c7:
87:d6:4c:e3:91:37:5f:a2:52:c4:61:f2:6e:55:39:
52:7e:0b:b5:79:a5:f6:6f:7d:57:df:18:9c:bb:85:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:35:6C:AC:42:82:12:3F:5A:93:61:60:B3:38:29:9B:B9:15:28
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:44:81:a2:92:9d:df:c9:50:3c:5f:cb:3e:bb:7d:96:58:40:
a2:1e:5f:46:63:18:bc:a6:85:64:d3:e7:4b:01:43:6c:5b:e8:
39:5a:dc:d5:d1:70:6f:d6:f6:9a:17:bc:6f:8a:22:29:b7:d5:
60:f8:b0:c7:14:c3:c4:2e:f2:82:af:48:74:68:da:01:52:e0:
92:28:8b:cb:d6:75:2e:fa:30:76:89:f0:0d:89:78:1c:9f:7f:
7c:5f:66:c5:7b:5b:c5:2d:55:d1:c1:16:23:b9:06:cf:f2:fb:
76:f4:05:a7:58:25:5f:f4:fe:1e:8b:e8:9d:b4:39:17:ce:1d:
72:b9:21:c6:fe:42:a6:b0:f0:03:d5:79:cb:16:37:93:85:10:
99:d2:b2:3f:46:4a:71:7e:fb:99:a0:b0:56:9c:58:7f:35:4e:
d1:57:44:de:b5:ef:df:aa:02:dc:95:73:ea:f4:6a:ec:6e:c3:
94:66:ab:ce:4c:66:51:a7:cf:7d:34:4a:32:4c:6e:b6:fb:04:
1f:3e:10:95:30:20:4d:ba:01:dd:bb:5e:bd:5b:d7:07:26:47:
f1:6f:59:b9:2d:6f:3c:88:da:92:6e:7a:93:b3:d0:a4:5f:55:
8d:86:cb:a2:a8:f0:f6:92:98:4f:f3:9e:b9:58:aa:a3:38:71:
f1:9a:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:14 2025 by rpki-client