
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: FJzFHcdxeK/qQeEJi+h8r0Cn6TkCHAKvfsxCLgGb1f0=
Subject key identifier: 0F:23:5E:79:39:54:75:0D:87:AA:09:46:0B:2A:B9:CD:C8:49:17:C0
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 019875D210D91748B09E7F92ACA318D0F8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 082A
Signing time: Mon 04 Aug 2025 16:02:37 +0000
Manifest this update: Mon 04 Aug 2025 16:02:37 +0000
Manifest next update: Tue 05 Aug 2025 16:02:37 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: MnKu9wESr6+VglQtdXIlXufuwO0gjBldTCxpLA0QYwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:10:d9:17:48:b0:9e:7f:92:ac:a3:18:d0:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Aug 4 16:02:37 2025 GMT
Not After : Aug 5 16:02:37 2025 GMT
Subject: CN=0f235e793954750d87aa09460b2ab9cdc84917c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:31:b6:4b:b9:eb:17:e1:3c:58:9b:c1:19:
dc:cd:55:07:34:92:58:f1:26:f3:c4:b9:0c:11:14:
b6:49:14:f5:23:6e:6b:1d:55:e4:48:bc:2a:92:c7:
cb:1a:70:23:8e:eb:39:02:05:f9:dc:09:97:42:b5:
b4:0c:7e:bc:0f:cd:82:b8:29:93:32:eb:e6:30:b2:
58:ba:6a:3a:b0:1b:e0:94:9a:28:24:12:13:ae:3d:
ac:4b:a4:f7:f9:97:1f:49:c5:04:20:7e:fe:84:55:
61:3b:91:1f:c4:1c:7a:a5:9e:f3:0a:f5:e2:90:8b:
42:d7:fc:c6:46:aa:72:b6:a6:e1:29:38:31:cf:13:
cc:64:34:2d:69:33:f1:4e:f1:eb:44:4c:95:57:3a:
f8:aa:55:8d:27:ef:1a:78:5d:69:03:2d:8f:24:2d:
10:71:b9:bf:04:8e:2f:31:5c:b9:93:fb:dd:4d:a9:
6c:17:c6:50:39:45:53:b9:eb:bd:bb:be:c6:53:8b:
a1:34:b1:be:a6:d7:d3:b2:b1:e4:0a:97:53:d3:09:
33:81:11:37:67:b1:17:d4:c1:b0:4c:8d:d4:aa:19:
0b:4e:84:b8:d8:66:e9:32:52:18:66:a7:a9:43:72:
cb:c1:a9:e5:a4:e7:3c:9e:15:9f:d7:ef:2c:ed:af:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:5E:79:39:54:75:0D:87:AA:09:46:0B:2A:B9:CD:C8:49:17:C0
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4c:ab:b3:e1:aa:4e:3f:a7:4d:06:9e:00:67:ce:22:ad:3e:
31:a3:d9:68:b5:97:85:98:db:72:32:d5:82:0a:c3:bc:31:54:
82:64:93:c5:b1:94:71:d7:dd:7f:1d:9f:df:0a:d9:7f:5c:53:
a1:a4:ec:88:af:d3:08:d2:6d:a8:ca:be:4a:00:7c:6a:c9:e4:
64:a6:f2:b2:11:9c:d0:ea:32:8a:1f:6b:3d:c4:a5:be:be:9b:
c6:7e:ae:84:26:c8:91:32:03:74:ec:e6:0d:54:ab:f9:e9:69:
37:9e:98:1f:66:37:fe:ef:e4:03:b7:6d:29:86:af:13:35:04:
16:55:6b:c7:8f:0f:d4:73:57:48:eb:dd:3a:f8:6a:20:5a:0c:
f2:ec:14:be:e5:00:2d:61:13:7c:e6:dc:45:06:35:21:c4:1c:
8e:9e:c9:ed:f2:78:cd:41:2f:f6:c4:a5:99:dc:68:73:4d:2f:
02:66:36:df:4e:c9:87:e3:39:84:c4:02:82:6d:48:2c:81:6c:
8b:86:57:ca:20:7b:13:25:f2:dc:70:79:a6:31:73:0a:d4:41:
fe:b3:29:13:65:53:6f:ce:22:40:ba:44:30:ad:00:93:ae:e6:
90:bb:2b:f2:ba:b2:38:51:f0:75:6c:69:05:91:81:56:29:71:
05:5e:0c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:22 2025 by rpki-client