Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
File: s4-3-dr7t_J8ZSqEbTf7nimODho.mft (raw, json)
Hash identifier: Hllzm0a2JUPwEt/exIt3RBJF7dTqdsPJuW+GdZBLwPo=
Subject key identifier: 95:2E:59:FE:80:49:14:69:4B:20:B3:F1:8B:B7:E3:E6:94:F9:24:A7
Authority key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
Certificate issuer: /CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Certificate serial: 0197B6A1F0D8B120366B60ECE6C449226522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
Manifest number: 2C
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: s4-3-dr7t_J8ZSqEbTf7nimODho.crl (hash: cLMtOWPLIcQMgngdhlwsjUmsr3qiHqeYGQzCkDBP0oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f0:d8:b1:20:36:6b:60:ec:e6:c4:49:22:65:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=952e59fe804914694b20b3f18bb7e3e694f924a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:7f:61:0f:61:39:7b:de:7a:af:b6:96:7b:
7d:12:02:ba:c9:8d:6d:89:45:28:f5:62:81:a0:5f:
f1:ce:9a:78:8f:ce:d7:0e:ff:64:12:a6:aa:bc:01:
c2:98:7c:ea:bd:c2:26:9a:77:fd:91:13:2c:de:59:
5e:be:92:4e:44:a6:29:84:78:39:08:5b:c8:22:2d:
eb:08:a6:af:73:03:94:39:c7:00:84:60:ab:3c:9c:
91:cb:c5:8a:5f:cd:59:c9:f0:6d:15:c5:01:70:d2:
88:32:0f:93:b9:2b:46:de:64:b4:cd:eb:12:5b:25:
14:77:83:d0:a6:90:40:cf:eb:a2:25:e7:f3:35:7b:
54:42:35:b1:90:79:18:9f:ad:a0:4b:96:46:3f:f8:
4d:ab:85:f2:90:cc:3c:6d:6e:4e:35:34:da:7d:38:
49:8c:f8:d7:07:4e:4e:06:0d:3e:ad:d1:3e:76:86:
c2:c4:1f:ec:31:d6:e6:05:15:9c:74:b3:cf:ee:74:
f4:db:48:e2:53:f6:57:73:69:88:24:d4:ef:04:6f:
0d:16:46:fa:ff:57:da:da:2c:3d:9e:c4:01:8a:a6:
a2:00:d5:59:e9:ba:4f:c0:3d:fc:4a:ca:c1:84:22:
e9:93:74:e9:7a:71:a7:e0:98:a8:53:6d:fd:ce:46:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:59:FE:80:49:14:69:4B:20:B3:F1:8B:B7:E3:E6:94:F9:24:A7
X509v3 Authority Key Identifier:
keyid:B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f1:12:0c:7c:61:4b:da:9e:e3:16:c1:85:80:3a:54:00:9b:
4e:5f:28:5a:14:4f:66:b3:76:3f:e2:ff:53:97:8a:ad:65:79:
c2:27:65:4b:14:fc:33:be:99:cb:1b:00:d1:6d:41:ed:62:b4:
b1:95:78:38:10:c5:bf:c2:a3:e1:73:5e:b4:39:0b:63:15:e5:
16:e2:89:79:4d:74:0e:ec:bc:e8:df:45:e0:6d:21:4c:a3:c5:
74:32:b2:b5:bd:92:a1:03:a3:3f:86:bb:10:e0:cc:03:fe:d9:
e9:5f:85:a0:4e:5e:b4:95:05:b9:59:08:e9:99:34:23:bd:97:
6d:04:44:50:45:46:b9:8e:58:eb:43:42:cb:1a:f8:6f:37:61:
73:6d:80:ba:c1:ca:36:fa:56:ec:67:d3:1d:84:5f:7d:f6:38:
72:2f:2d:c2:a3:27:fe:b8:1c:e3:ec:2b:ca:7f:41:8b:a7:19:
05:d2:b1:ea:7d:a0:e1:02:8d:2a:f2:f2:01:0c:57:a9:62:25:
5c:2b:fb:89:9f:94:f1:98:e3:1a:90:df:48:af:0b:dd:8a:79:
52:75:f7:f5:df:95:3b:d9:18:fd:a2:b1:3c:da:ae:71:af:9b:
11:f8:0b:97:dc:15:05:db:99:86:fd:49:32:23:df:3b:d9:f8:
ee:37:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:08 2025 by rpki-client