Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier: 5+4ABpf+8qUv7j7ePXKsRz4ZT4GGzjitkZpMTLX6oRE=
Subject key identifier: 52:20:F8:15:82:29:48:26:4E:4E:B9:EB:CD:9F:06:1A:7D:B4:B9:D7
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 019768F2E05E83CB2CCD11C86D90F2BC705B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number: 1C
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: 1TRhTqL+ZKf8p4LtqrV6FmQjtz+DK8g4uLuKJ4HIYjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:e0:5e:83:cb:2c:cd:11:c8:6d:90:f2:bc:70:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=5220f815822948264e4eb9ebcd9f061a7db4b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:6f:84:e8:be:da:07:5e:01:14:48:d8:e0:
13:19:8a:4f:fa:8d:6e:b5:10:52:7a:d8:a3:5b:18:
7f:d4:fa:65:22:d9:d1:1b:27:ba:44:58:b6:91:cc:
10:7e:a7:4d:d3:a9:5d:eb:14:e9:aa:cb:54:70:ad:
d6:de:bc:ba:14:8d:11:d2:ee:1f:23:53:41:f4:44:
ce:fe:4e:29:55:fc:fd:8d:0f:2d:e7:f5:45:f0:41:
a4:81:28:a6:95:73:7b:84:5d:d8:b3:db:04:1c:17:
07:40:27:bb:94:2c:66:5e:88:46:40:f4:15:7c:ee:
32:fd:f1:e4:eb:f6:f3:f8:dc:89:d8:e2:2d:72:e7:
30:36:79:06:e5:a9:58:72:41:3a:c4:a8:77:a6:5d:
2a:40:96:bc:54:20:1e:82:5f:18:99:8e:0c:bf:c7:
d6:d2:1d:e9:9b:07:4d:fc:88:e6:8d:70:96:0f:46:
82:6f:3f:02:59:9f:0d:af:59:9e:ae:ca:54:58:e2:
97:6e:c3:a4:bd:a0:ff:f1:8e:72:b9:22:37:c4:1b:
e2:b5:d9:73:fd:30:7a:f8:ed:85:fa:e5:a0:4f:a5:
67:86:0f:66:7e:a6:dd:a5:68:17:96:0f:88:15:b7:
85:c9:86:d1:98:73:5e:16:51:38:4f:84:b4:bb:25:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:F8:15:82:29:48:26:4E:4E:B9:EB:CD:9F:06:1A:7D:B4:B9:D7
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:de:24:b9:be:0e:ca:64:8d:7f:0c:07:67:39:2f:2e:e0:51:
a3:7c:84:de:42:55:5c:70:55:49:e3:56:e1:37:1e:c9:75:11:
3e:83:33:90:8f:0e:c3:f3:09:99:92:02:d2:b3:b6:5b:54:bc:
b3:a1:b5:fa:73:52:12:6f:86:b2:45:2c:ad:73:11:1a:3d:74:
70:40:29:4a:99:68:fe:6f:f5:e1:58:d3:4d:fb:a9:5a:02:e1:
1e:74:a0:f6:4e:65:bd:f9:94:21:05:61:4f:65:e7:c3:b2:7b:
8f:bd:e5:80:32:7f:07:5d:9a:02:d1:c2:67:78:94:48:7e:57:
3d:53:bc:bc:3b:af:8a:4b:72:95:e4:2c:6a:2e:ab:8c:59:1d:
36:90:09:45:e3:6c:03:fd:0a:1a:bc:41:ca:07:62:10:2e:23:
bb:de:3d:2d:0e:d0:9e:94:13:0e:78:b9:b7:8b:d4:06:74:b1:
90:a1:c5:a9:27:f1:02:28:b3:aa:6f:ce:37:dd:0b:a0:f9:a7:
ed:f3:26:fb:69:f4:a9:6c:6c:cc:9d:82:ab:c1:1b:b3:25:8e:
fe:be:4e:8f:75:d5:eb:0c:c3:5e:6e:72:2f:9c:8b:d0:7f:dc:
02:49:34:c5:5a:63:3b:c2:cb:d9:ea:dd:d8:5e:f9:8d:e1:d9:
07:8c:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:33 2025 by rpki-client