Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
File: 3k_14NZGWzwsc6LG4Q5WovpzFic.mft (raw, json)
Hash identifier: 2fgEQTm+QLZ2a78yNShcp9f5yIZfy2mbBTyTQsxmzC8=
Subject key identifier: BD:13:E7:7A:9E:DA:9A:09:80:BC:BC:0F:D4:14:E5:D8:DD:C0:FA:1B
Authority key identifier: DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
Certificate issuer: /CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Certificate serial: 01978F5B763E0EFC07F1DE48AA039536973E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
Manifest number: 0D39
Signing time: Fri 20 Jun 2025 22:00:25 +0000
Manifest this update: Fri 20 Jun 2025 22:00:25 +0000
Manifest next update: Sat 21 Jun 2025 22:00:25 +0000
Files and hashes: 1: 3k_14NZGWzwsc6LG4Q5WovpzFic.crl (hash: E7DCQkFZQO/ZqLiA57Cufubl3Je+JbeeyLdkX6h5MN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8f:5b:76:3e:0e:fc:07:f1:de:48:aa:03:95:36:97:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Validity
Not Before: Jun 20 22:00:25 2025 GMT
Not After : Jun 21 22:00:25 2025 GMT
Subject: CN=bd13e77a9eda9a0980bcbc0fd414e5d8ddc0fa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:7d:40:48:ba:83:d2:77:e5:16:2c:b8:08:
01:9a:0d:d8:68:83:f1:c1:5c:bd:47:51:c5:89:a3:
c1:21:9b:6f:82:21:e5:d2:1d:c5:ea:83:76:ef:ad:
7c:3e:28:7f:39:60:24:de:00:5c:cf:0b:37:b0:d2:
5b:95:55:d3:eb:59:b6:dc:20:84:e1:c1:a3:fa:c1:
97:01:cb:f9:b9:a3:ef:dc:10:bc:e8:c8:26:68:e6:
eb:0f:5d:c0:82:ec:9f:bb:93:19:57:4e:8a:54:7b:
c6:6c:8d:0f:e8:d6:41:6a:11:10:14:23:e9:04:0c:
3c:52:f5:85:6d:32:e3:79:e8:d3:93:37:e2:26:13:
7e:aa:c5:7b:bc:c6:00:11:3d:04:85:89:eb:55:a5:
17:05:72:7c:35:01:3d:b9:ed:08:f0:28:fe:15:87:
3c:48:b5:bb:7f:98:88:fd:fa:d0:b5:d8:71:6d:3d:
03:08:59:10:17:31:28:30:31:18:de:45:54:eb:57:
50:7d:d0:b8:32:a6:9e:1c:45:04:67:6c:85:0c:1a:
65:81:ef:53:d4:f6:ff:24:d8:74:7b:ce:05:3e:46:
dc:cd:33:0c:c5:9e:69:19:07:9a:68:51:5a:ab:f8:
0c:3b:8c:ce:3f:f6:c1:b9:0b:09:8f:1b:a3:7c:0f:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:E7:7A:9E:DA:9A:09:80:BC:BC:0F:D4:14:E5:D8:DD:C0:FA:1B
X509v3 Authority Key Identifier:
keyid:DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ee:c4:d4:66:fd:04:4f:cd:8e:f0:cb:9b:c0:79:34:c3:85:
ea:ca:e5:9b:d6:d1:ed:90:02:12:75:75:1d:b3:6d:bc:96:cf:
26:fc:27:99:b0:fc:c6:6c:ef:86:05:d4:5a:f7:a0:bf:5f:4f:
62:12:fa:b1:80:66:dd:23:66:e2:63:c6:51:a7:e8:ff:ec:47:
fe:a8:44:a7:05:c5:26:c3:8e:32:df:47:30:41:5a:c7:e2:3d:
f1:f2:c0:e0:dd:c0:2f:8c:76:3c:3a:56:92:96:07:ec:5a:6c:
cd:e9:b5:4f:db:62:45:6a:ed:36:a3:46:e9:d7:cc:b7:24:dd:
77:e4:5c:6a:3a:23:26:91:36:dd:48:b2:af:50:b6:d0:54:24:
f2:bb:85:b7:74:0a:e7:77:6c:80:96:b6:1e:ac:df:1d:3a:a7:
11:6f:55:61:11:49:6a:9c:80:a7:47:ae:77:e0:5f:fc:a1:0d:
96:27:9c:d8:21:63:26:97:ed:cc:6a:77:91:0d:45:aa:e0:01:
4f:6a:8f:f2:ac:e8:b7:c3:14:2a:03:be:a9:24:f3:85:f5:2e:
38:3c:41:af:4c:a4:d7:c0:36:56:0e:66:83:48:4e:c3:99:d7:
8c:8e:e7:fa:cf:b6:bc:ac:92:e2:ee:05:7d:4b:91:bd:c4:77:
29:8b:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:04:33 2025 by rpki-client