Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: wwRoz5I5EZODymT8vVBczKUpXblgH9HolEl4Kwg0Wr4=
Subject key identifier: ED:29:E7:D3:E5:C4:E1:ED:DA:88:91:85:F4:B8:34:42:6B:AF:A4:DB
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019774F725568B2CE3DFD32E05AF8A7871DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 19:00:43 +0000
Manifest this update: Sun 15 Jun 2025 19:00:43 +0000
Manifest next update: Mon 16 Jun 2025 19:00:43 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: ZIu6NGe7XeR75xL0DHcjwWzOGci/PjLIjDVxzqmDBQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:25:56:8b:2c:e3:df:d3:2e:05:af:8a:78:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Jun 15 19:00:43 2025 GMT
Not After : Jun 16 19:00:43 2025 GMT
Subject: CN=ed29e7d3e5c4e1edda889185f4b834426bafa4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:4c:46:51:1f:aa:4c:ac:bf:00:65:96:b3:
12:74:24:92:72:0a:f2:b6:2a:7a:39:c2:a6:3c:d1:
95:00:67:ff:f1:d8:e7:33:6d:09:82:4f:96:98:99:
6f:79:9b:78:33:15:8e:1f:a2:52:a9:17:38:77:b6:
22:cf:49:e1:7e:69:90:ef:7a:09:45:95:35:12:86:
3a:aa:c2:b0:e2:fe:eb:20:71:83:11:9a:bb:18:c6:
79:c5:d3:1e:db:b6:2c:30:e0:54:b6:ff:af:88:ee:
28:46:f3:0e:01:ab:71:a6:c6:19:25:8f:93:71:a2:
e9:87:dd:a9:ab:d9:18:4d:af:82:ec:3e:56:85:4e:
e9:c5:a6:bb:a5:1e:6f:55:f3:eb:1f:c9:cf:2a:d2:
71:43:a6:9e:0d:23:ce:f4:e5:99:53:e7:76:46:c7:
2b:de:f4:ad:21:ce:6c:f3:a6:8c:4b:8e:b8:6f:1d:
03:2b:e2:13:5f:52:bc:b0:c4:f1:8b:20:97:f2:b1:
c4:47:1a:36:65:b7:9b:2d:ce:86:c7:91:3c:f3:0a:
3e:3f:53:ac:fc:b9:83:65:38:97:f9:a0:bb:ff:33:
79:4c:06:6e:78:82:a8:ca:eb:fd:3a:10:dc:12:ef:
e1:4f:32:c4:9d:f4:19:0c:e4:97:98:a9:75:57:7d:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:E7:D3:E5:C4:E1:ED:DA:88:91:85:F4:B8:34:42:6B:AF:A4:DB
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cb:75:6c:16:2e:37:c3:73:5b:54:c4:31:fa:6f:e0:d3:81:
f8:9d:89:ff:02:19:b6:98:10:4a:d0:ff:83:30:e2:5b:6d:b7:
f2:29:ac:db:d3:29:9d:b1:8c:5c:4c:43:65:45:46:68:5b:22:
84:42:6f:4f:0f:8d:36:0b:a7:8b:13:47:62:34:b3:8c:4d:e1:
eb:10:91:c8:3b:20:cd:7b:1b:aa:46:da:0c:f5:9a:cd:7f:32:
98:ac:bb:96:70:5c:9e:6f:24:4e:98:f3:bc:6b:4b:8c:55:81:
d0:cb:ea:64:07:58:bc:8b:d3:eb:d6:6b:5d:97:58:1d:fe:0e:
18:f2:b5:1d:d7:58:d3:e8:0e:de:87:36:2a:72:f2:d4:03:cc:
6c:3a:91:20:a9:b1:18:9b:36:55:22:10:2b:21:56:1d:90:d6:
0f:b5:87:75:18:92:22:73:c1:c8:65:04:f5:f8:c0:71:08:28:
7c:83:21:f3:f5:07:30:e8:89:2e:a5:d8:b2:19:04:76:cf:22:
e8:96:fc:bc:9b:93:d2:f9:0d:cc:63:df:f9:fc:7a:09:a2:84:
bc:f4:2a:57:aa:80:cf:7f:38:de:46:f4:de:00:84:74:52:23:
f4:20:a4:b4:3a:03:1e:bf:7b:9a:82:9c:75:c5:6c:45:d0:de:
79:fb:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:48:17 2025 by rpki-client