Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: 5Eq69/gMKYFMjLSk8D46AT/Y20ahn3W3Pvjk6LFjaKA=
Subject key identifier: A2:7E:B7:4C:FA:C0:FE:AC:8D:CB:0C:85:1F:8C:A9:27:B7:7E:64:9C
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 0197711ABEA84215DAD76DE1EFCD8BF8C252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 158B
Signing time: Sun 15 Jun 2025 01:01:07 +0000
Manifest this update: Sun 15 Jun 2025 01:01:07 +0000
Manifest next update: Mon 16 Jun 2025 01:01:07 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: AXfvPbGRckIKoE9xYAa39otUbNBJJQUUE3PpqVctiNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:be:a8:42:15:da:d7:6d:e1:ef:cd:8b:f8:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Jun 15 01:01:07 2025 GMT
Not After : Jun 16 01:01:07 2025 GMT
Subject: CN=a27eb74cfac0feac8dcb0c851f8ca927b77e649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:09:13:f9:8f:a3:c9:3e:d1:7c:8f:07:b3:
a2:ae:f6:8e:5a:aa:56:72:f5:29:1e:61:b6:bd:05:
3c:5e:29:68:6f:5b:ce:9b:76:cb:67:97:ef:e8:c9:
e9:0e:3b:73:9f:3f:d8:a0:92:cf:6e:49:1a:aa:33:
80:1c:5c:ab:88:6b:f8:b3:fb:e8:18:ae:a2:aa:1d:
b8:6a:12:0a:6c:cc:a3:8a:4d:eb:c9:d9:c6:55:4c:
ad:39:8c:c3:05:42:f9:65:f5:67:e4:72:98:93:c2:
b1:32:17:00:74:cd:b8:19:f6:58:09:c6:8d:7e:e0:
25:83:56:bf:37:ed:73:51:04:ca:d9:67:db:12:64:
54:1c:b2:70:3f:46:0c:6c:4c:cd:aa:03:9a:5c:d1:
2c:73:ce:2b:df:65:45:97:5f:35:59:ec:4e:04:ae:
37:c1:8a:43:bc:fc:16:c6:3b:82:9b:31:84:c1:14:
1e:57:0e:47:6e:0f:ca:7d:29:9a:5a:73:90:13:34:
75:d2:1e:c8:fc:76:bf:8b:20:95:96:ad:50:0e:9b:
7e:3a:76:33:54:d9:70:98:1e:eb:a9:43:73:7e:40:
dd:54:76:b9:fc:7b:1b:65:bf:ed:5c:db:60:14:5e:
3b:9c:78:4c:53:ac:a2:7f:d2:38:69:81:4d:2a:63:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:B7:4C:FA:C0:FE:AC:8D:CB:0C:85:1F:8C:A9:27:B7:7E:64:9C
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:80:38:65:ea:2d:53:e3:cf:eb:3c:ec:e7:62:b0:d7:a4:aa:
48:ea:e4:6c:64:70:41:ad:cf:25:15:be:20:a1:94:b1:3c:09:
59:4f:a6:11:9c:27:ef:86:cc:47:ce:a4:71:45:e4:3a:34:d6:
1e:94:78:3d:c9:ae:75:24:54:8c:3d:ef:58:ff:51:c6:9f:fe:
e9:65:44:29:21:39:cc:3d:89:8d:21:69:0d:f7:d1:d4:1f:63:
36:4d:5c:5f:cc:84:e3:56:54:2d:42:b5:ba:7a:d2:50:fb:f2:
95:3d:89:65:d2:75:f2:41:a1:54:0c:a7:66:b4:d3:9c:a6:3a:
d2:92:bc:8b:bf:48:d7:62:02:ca:bc:c4:ac:c1:ac:fc:57:dd:
cc:ec:d1:00:cd:7b:a8:ad:c2:7d:98:ab:bd:f1:39:ae:67:45:
2d:ee:42:2e:4b:fa:63:c5:24:4f:92:19:82:ca:bb:fe:be:24:
b9:ff:08:f5:9a:8f:37:74:36:8a:b4:3e:f0:38:e3:cb:81:06:
44:5b:b2:e6:02:a6:d6:5d:57:91:13:b9:1e:1b:fe:67:fc:74:
06:30:e4:7c:0a:37:66:bc:1d:3f:9f:83:26:a7:65:31:33:9e:
c7:4a:57:44:72:18:91:37:1e:cd:80:3d:97:1e:4b:47:26:80:
88:69:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:44:11 2025 by rpki-client