Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: ai7EpDI2panmdbKJn2MWxWgAAo7aK/9OuwHkWM5ILVc=
Subject key identifier: 37:C8:8F:3C:CA:17:50:10:5C:0B:90:58:71:7D:57:98:9E:FE:C4:EB
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 01976FD0B979F75747CE3B565C24EC81474B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 03D5
Signing time: Sat 14 Jun 2025 19:00:39 +0000
Manifest this update: Sat 14 Jun 2025 19:00:39 +0000
Manifest next update: Sun 15 Jun 2025 19:00:39 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: +ztxsBZh+4kTWe4KuAm5A1vD3w043++bL3L+D4FSuxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:b9:79:f7:57:47:ce:3b:56:5c:24:ec:81:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Jun 14 19:00:39 2025 GMT
Not After : Jun 15 19:00:39 2025 GMT
Subject: CN=37c88f3cca1750105c0b9058717d57989efec4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:cb:cb:7f:72:43:35:6f:48:c1:ed:a2:99:
d3:69:3a:d5:f5:80:a2:6d:d2:54:80:9c:76:bf:8c:
8b:16:22:df:b0:fa:8c:5c:1d:d8:81:85:19:91:39:
83:17:98:e8:30:d4:c1:ca:4d:e0:d6:5b:1e:58:74:
ca:4c:a7:df:aa:fd:2c:31:88:76:5a:6a:c3:03:db:
d8:95:6b:bc:dc:34:6e:a4:ba:ce:e3:bc:c0:d6:f1:
5a:a2:f3:b3:b7:f1:92:9f:5d:1a:38:98:c5:26:e2:
07:f4:82:66:e5:5a:2b:2b:fd:82:b0:36:85:7f:ab:
9f:37:01:9c:36:1e:cb:9e:e6:fa:04:39:5d:7b:a7:
b5:ad:1a:14:1c:53:92:2e:5d:7f:5e:d0:fe:fc:27:
d6:6f:d1:1b:f1:cc:fa:b3:08:df:88:00:77:49:8e:
b4:e6:69:65:b6:bb:a6:06:eb:44:31:3a:b8:1f:82:
7d:ff:8a:26:d8:7e:54:18:3f:5c:1a:23:5e:7a:8b:
85:a6:7c:54:d3:f7:d8:3f:f8:24:1b:d9:6b:0e:9d:
57:6a:2b:70:b3:61:90:2c:22:ce:73:00:10:37:eb:
c1:1f:32:66:ac:40:9a:70:1a:01:78:d5:a3:c7:3a:
95:2c:94:39:99:bb:54:7b:9a:60:dc:84:e0:47:e5:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C8:8F:3C:CA:17:50:10:5C:0B:90:58:71:7D:57:98:9E:FE:C4:EB
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7c:71:3b:30:a3:19:81:25:4c:17:c7:28:e5:34:ad:d7:30:
f1:e0:09:a0:ec:b7:12:31:6b:51:0a:8a:8a:e8:4e:0b:a0:0f:
d2:f0:d6:37:47:09:aa:28:5c:dd:78:06:9f:cb:fb:c8:23:8d:
10:c7:60:98:78:f4:ec:dd:5a:de:04:e0:cd:b4:c9:71:c8:6e:
ab:82:7e:42:68:b5:3a:36:07:34:be:9a:87:cd:ed:19:2f:6b:
17:6e:5e:3b:25:99:d6:39:42:03:ce:e3:22:ce:4d:94:de:67:
6d:d0:eb:62:7e:6c:90:86:12:83:d0:91:cf:54:9a:09:72:1d:
27:e1:bb:ef:06:12:5b:ca:f6:31:8b:b2:24:ee:2e:aa:e1:62:
0d:a5:b1:f9:7a:eb:59:bc:c4:f4:b9:cd:1a:53:30:36:b6:c5:
a6:64:0f:39:33:5a:5f:2b:02:28:a8:81:58:ac:27:6e:dd:37:
f8:89:c9:01:4f:5d:54:0a:e6:b3:de:b6:51:61:3c:a8:3e:97:
16:62:d6:bb:06:4f:4f:55:fb:3a:d8:e1:f6:e4:e6:08:6b:28:
1a:09:10:81:18:90:b6:5b:62:bf:97:81:ba:13:23:3b:70:e5:
d6:85:68:9e:cf:3d:a5:0b:6b:3b:d1:3b:f8:e9:12:d7:d5:ca:
7a:fa:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:04:14 2025 by rpki-client