Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: tBikAQaRRraoWWWsibPYuGrV0cX0J4vv4FGI7cR3BJs=
Subject key identifier: 58:5C:24:9C:36:F4:94:EC:4A:FC:E2:D0:CD:3B:A0:42:32:19:7B:A1
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 01977565A7E9E947D969F9D7918D5FDA469A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 05CB
Signing time: Sun 15 Jun 2025 21:01:25 +0000
Manifest this update: Sun 15 Jun 2025 21:01:25 +0000
Manifest next update: Mon 16 Jun 2025 21:01:25 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: 7p/5fxBRk8KNnbn7GVGT6Yaqp1GrOcB/o6MHzz7OwmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:a7:e9:e9:47:d9:69:f9:d7:91:8d:5f:da:46:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Jun 15 21:01:25 2025 GMT
Not After : Jun 16 21:01:25 2025 GMT
Subject: CN=585c249c36f494ec4afce2d0cd3ba04232197ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:4b:31:0b:14:7c:38:1d:d4:bc:38:9f:24:
95:34:99:8d:cd:84:75:61:06:9a:5a:7a:09:be:32:
2f:b0:d2:fb:c1:4f:9c:57:49:5d:aa:f8:22:66:f7:
0e:93:3b:be:b3:20:21:38:7d:ce:b2:63:34:1f:26:
9a:6a:40:b9:7a:f5:3e:fa:ea:5a:55:64:35:8c:7a:
7d:d0:ad:ac:48:5c:41:bb:48:96:29:d9:d6:39:9a:
96:4d:10:9e:71:ad:61:5a:2b:28:bb:cc:f8:a2:91:
99:a3:03:1c:25:6b:2f:c8:47:d1:7b:88:a7:ae:6e:
17:40:cb:3a:62:48:91:26:a0:50:3b:7b:e4:75:df:
21:f6:54:1b:db:ee:c7:fe:55:fe:60:c6:53:a6:34:
27:e0:85:b9:ad:1b:21:04:c4:13:70:ff:3b:90:2b:
5c:03:0c:78:9c:70:31:63:94:da:ba:bc:62:5b:06:
3f:29:bd:89:37:8e:e9:59:b1:8d:7b:8d:66:57:b9:
b8:67:5f:1e:4e:f3:de:02:7a:0a:0b:5a:bd:62:72:
af:2a:9d:bc:1d:c0:17:f9:18:0a:ea:6b:c2:fd:ba:
19:8c:e0:af:fa:11:8f:51:59:bf:7b:2f:63:38:b4:
6a:60:fe:1b:cd:f9:0d:a1:7e:48:b5:ad:23:c0:9d:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:24:9C:36:F4:94:EC:4A:FC:E2:D0:CD:3B:A0:42:32:19:7B:A1
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:75:3e:a1:07:82:33:63:44:94:d1:fb:f9:66:f6:9e:0e:
c9:b2:af:7e:03:eb:3e:71:11:0d:ce:01:9d:a0:e4:ad:af:39:
3f:59:de:1c:1d:53:8a:b7:09:05:bf:1d:35:47:da:db:c1:f9:
e5:93:d9:91:a5:e2:c7:e8:01:bc:72:8a:8f:a9:15:0d:fd:3c:
87:17:82:de:42:08:c9:17:ae:1e:d5:78:8f:08:ca:5b:d9:30:
1c:cb:0f:6d:2d:08:cd:32:47:50:85:a6:62:4e:2d:07:50:ff:
08:52:34:0e:b2:ff:e4:1e:0d:64:10:61:e6:2d:f2:2d:33:bf:
fb:9e:61:4a:ad:a2:b2:c6:43:ae:b2:14:12:2a:25:9d:5c:b1:
4b:be:eb:76:6c:55:13:93:63:c0:08:dc:e8:ab:bf:db:97:b2:
9b:ec:3b:1f:f7:94:b9:f2:c2:2f:14:e8:a8:ad:b7:7e:42:61:
0c:51:45:d7:90:4f:ec:47:68:bf:26:3b:52:11:39:74:7b:4a:
d9:68:23:f0:2c:2e:e3:4c:41:7c:83:75:2e:7f:28:e3:5c:b8:
79:90:a3:44:71:65:87:0f:74:65:5a:b9:1d:19:47:2f:5e:df:
f2:c9:33:4c:6d:ea:d8:59:f7:76:ae:3e:49:2a:55:31:6b:62:
4c:e4:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:13:11 2025 by rpki-client