Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: eZzXDiDnsnsSjaoyn5WMipjP9K/AMgkwWBPwRFiMgeE=
Subject key identifier: D6:CE:9D:0B:80:9C:82:66:28:38:25:84:F8:95:DF:57:05:CF:8A:43
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 01976961B302C85CB6A65FBDC16E10F4C554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 079F
Signing time: Fri 13 Jun 2025 13:01:39 +0000
Manifest this update: Fri 13 Jun 2025 13:01:39 +0000
Manifest next update: Sat 14 Jun 2025 13:01:39 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: luM7EmYUe6tbwd9U1T/k6WIbyyZc8OtdXN70Vg2gsAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:b3:02:c8:5c:b6:a6:5f:bd:c1:6e:10:f4:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Jun 13 13:01:39 2025 GMT
Not After : Jun 14 13:01:39 2025 GMT
Subject: CN=d6ce9d0b809c826628382584f895df5705cf8a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:70:2c:22:8c:41:17:04:9c:3a:bb:53:2f:
69:82:24:80:50:0a:a0:2b:2c:b6:9d:fb:53:1e:97:
f4:e2:ea:32:cc:61:c1:60:82:85:93:03:f5:2f:e2:
8f:0f:fc:ab:c6:4d:4c:ae:d5:42:e8:89:63:f1:a2:
69:aa:ed:67:d8:03:f6:25:f9:79:f5:0a:b4:f1:2a:
9b:23:b2:14:89:34:dd:7e:76:d0:f6:04:a2:24:c8:
ce:84:42:41:3e:5a:67:6c:d8:4b:d1:6a:28:c8:b5:
54:52:ba:54:09:4a:aa:3e:d2:fb:b4:10:84:f9:4c:
4a:b2:11:5d:1a:86:9a:29:61:49:f3:f0:d5:50:16:
12:80:23:4b:86:c8:a1:e5:1c:81:2b:49:8f:18:81:
6f:74:7b:fb:a4:27:2a:06:3f:61:dd:fe:e6:17:dd:
3c:e6:52:e0:a6:e2:41:76:67:2c:ed:07:be:2d:29:
21:b6:a1:03:a2:09:79:2f:a5:fc:d6:1e:cf:bc:db:
e7:b8:50:a2:19:af:6a:6b:6f:46:94:79:df:3e:bb:
a7:68:b2:85:a7:99:68:ba:4a:a3:7d:aa:5c:79:d3:
b5:35:03:e8:77:ab:bc:2d:b6:77:84:a6:40:d8:e9:
30:da:70:52:a9:46:d3:8d:55:c6:23:a5:9a:4c:d4:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:9D:0B:80:9C:82:66:28:38:25:84:F8:95:DF:57:05:CF:8A:43
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ce:b9:14:d7:71:f5:1d:2e:b1:a4:89:c5:be:f5:ac:e6:99:
4c:8a:0a:bd:bf:3d:f1:dd:9d:04:e0:b8:9d:c6:73:66:c1:75:
09:5a:41:6c:1b:5a:eb:0a:50:f6:75:b2:2e:89:2a:94:09:d5:
5a:dc:b4:a3:e0:99:19:67:f0:42:68:28:c6:59:21:47:cb:65:
fb:85:ed:d2:a4:54:b6:19:64:bc:06:12:ba:f4:f3:6a:91:e9:
ee:d0:0a:01:8b:66:4c:dc:f9:db:30:ca:02:ab:50:2f:eb:d9:
e3:d5:25:a3:a2:49:13:4f:6d:9b:90:2a:fd:9f:51:f5:fd:14:
43:92:4e:eb:c3:3a:19:3e:c9:c3:10:4b:1f:21:50:e9:cd:57:
9f:05:1b:47:3b:04:a3:13:09:a1:c7:a2:5e:bb:04:22:86:fb:
e0:bf:3a:54:a5:70:b0:00:93:70:fa:95:c2:ab:98:ea:40:22:
07:a3:7f:08:e8:08:af:70:dd:aa:d5:b2:f8:34:1c:85:48:9a:
fd:69:e5:6c:2d:6e:d0:d9:04:ec:db:d8:e6:e1:c9:54:4b:d4:
51:f3:c8:46:0a:c3:96:e3:b5:3e:17:9b:30:d6:b1:5d:31:9b:
db:61:9f:6c:4c:e4:b4:9b:35:5e:d7:a3:a0:24:d8:a5:7e:ed:
0a:26:18:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:40 2025 by rpki-client