Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: y1KKpR7uLMkb7P2YbEz9yh6zht8ulgDCa9XeSjrrkB0=
Subject key identifier: 7E:33:12:BE:77:CC:4A:08:9F:C1:BD:71:A6:93:CE:FD:75:B0:F6:9C
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 01976E875CFFFC0D6AC1CC4CD152DFC1B21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 115E
Signing time: Sat 14 Jun 2025 13:00:54 +0000
Manifest this update: Sat 14 Jun 2025 13:00:54 +0000
Manifest next update: Sun 15 Jun 2025 13:00:54 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: ZEBhSlIHDAD4yv4uRkxhvG8tlThkCOJmYEfrVVed/yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:5c:ff:fc:0d:6a:c1:cc:4c:d1:52:df:c1:b2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Jun 14 13:00:54 2025 GMT
Not After : Jun 15 13:00:54 2025 GMT
Subject: CN=7e3312be77cc4a089fc1bd71a693cefd75b0f69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:b5:98:83:f8:39:cf:fa:6f:53:34:32:ed:
aa:9c:c1:38:6d:7a:27:1c:e2:ec:cb:91:40:54:db:
99:c1:b9:f7:a0:62:bb:51:a2:ab:17:3e:b8:72:05:
38:4d:4b:16:dc:fc:7a:55:48:e1:2a:c5:be:08:99:
64:14:eb:3f:50:9f:79:2b:c7:99:89:eb:78:e4:8e:
5c:c0:1b:15:22:c2:d1:f8:02:16:02:12:8c:27:70:
58:ea:7f:82:7a:23:a3:8a:52:21:5d:ab:c8:55:21:
3d:6c:b1:fa:59:22:53:c8:c2:98:d7:1b:99:f2:d4:
93:27:9f:ce:6d:d0:ac:8c:4e:fc:4f:ee:8c:ae:af:
a2:73:24:85:e0:a4:40:c6:32:a9:76:08:ab:3d:ce:
a3:f8:2c:8a:20:c4:e1:61:5d:3c:f3:8a:c8:d0:fc:
32:ec:5f:bb:b0:2c:72:13:d7:44:06:1c:3e:62:54:
27:cb:c6:c7:0e:8f:6a:70:8b:f6:c8:55:1e:4a:40:
31:26:e1:71:cd:e2:c4:18:79:3b:a4:31:2b:32:c1:
d1:89:1c:0d:39:c9:bf:60:fe:4e:fc:96:20:c9:fc:
2e:a3:d8:51:d0:49:43:ca:55:3b:2b:f9:5c:8f:a3:
de:db:53:b4:7a:21:3f:ee:fa:54:88:70:d3:cc:44:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:12:BE:77:CC:4A:08:9F:C1:BD:71:A6:93:CE:FD:75:B0:F6:9C
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e9:4c:6e:26:5f:c4:97:6c:4f:1f:f6:92:a5:f3:a7:c1:09:
74:ee:54:16:1f:1c:20:13:49:30:5f:19:aa:46:f1:c6:d7:95:
50:2a:cf:d1:7b:13:ce:4b:f6:93:92:43:79:c6:b0:c1:63:d1:
28:09:5d:c3:bc:7c:11:26:73:9e:67:e1:1d:28:ec:cc:ec:c1:
e0:19:a3:70:6b:9f:bd:49:25:95:69:dc:f6:e1:02:32:4d:8f:
41:e3:fb:d8:23:ca:82:39:40:2e:a9:41:ed:5c:27:74:9e:21:
fc:fd:6a:ad:02:11:b7:09:ab:45:3f:67:64:f0:77:c6:ad:c0:
89:59:14:bd:86:b4:d1:4b:1d:90:d1:3e:91:5e:39:7c:68:94:
3d:f0:ec:86:51:d4:38:c8:e8:f3:af:a4:1f:8f:67:7e:d4:14:
16:4d:25:bd:b4:da:7f:93:2a:3f:8e:09:17:a2:dc:da:02:e2:
fd:45:4f:e2:c6:82:19:68:25:33:98:a1:d5:66:ab:03:b4:71:
3b:e9:39:89:e5:80:7a:89:e6:ed:ea:74:07:64:d4:88:a3:ad:
4d:40:7e:7b:1a:0f:d3:de:b0:0c:0c:81:c7:c1:81:2d:36:94:
fa:61:be:92:8e:40:a5:59:0b:f4:39:74:3d:a6:11:7f:50:e8:
f4:ac:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:44:07 2025 by rpki-client