Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: aS8+K69fkTdce///L9PZecwmZBd7IGcVDeX9tnJGOkI=
Subject key identifier: 93:69:7B:90:76:08:B9:28:31:7B:CA:53:52:36:36:F3:A3:56:9F:64
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 0198D65F9D9CD0559771E5A9C86A1C8E4CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0CD9
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: IqTVhq29tKR7iC7+vFiHCm4x2gYf1VQkuwXbn6wqxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9d:9c:d0:55:97:71:e5:a9:c8:6a:1c:8e:4c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=93697b907608b928317bca53523636f3a3569f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:0b:c5:88:1f:28:3e:c0:8b:6f:4d:76:7d:
3a:95:61:4d:09:d5:82:89:83:ea:25:c6:a0:55:4f:
9d:ad:d1:59:56:13:a3:06:cd:fd:32:bd:00:d5:d7:
38:ac:ed:c5:17:65:cf:0a:a9:55:f3:78:f8:02:98:
c4:38:ce:ec:3e:90:46:38:0e:a3:0c:69:05:45:8c:
22:c8:68:ab:50:04:c6:62:6c:26:2f:5b:cb:2a:51:
33:c4:3d:23:b7:fd:a3:ba:a2:08:34:9f:2c:b5:19:
f2:aa:0d:58:df:2c:26:49:83:3d:70:5f:17:e9:39:
0a:f2:97:2e:77:56:21:42:dd:cb:e4:cc:53:8f:d9:
b5:f9:45:8e:1c:4a:74:3c:41:e5:2b:6c:b2:c5:8b:
8d:36:96:88:ac:9a:cd:33:10:b6:be:73:51:17:e2:
1d:34:f0:9a:f3:5f:9d:82:14:04:b4:a4:93:a4:1e:
03:fd:dc:e4:f6:61:e5:16:ce:e8:b7:e0:30:cd:eb:
ff:8f:78:4e:f9:6f:1a:af:84:e8:23:63:93:38:25:
f9:bb:d5:4e:6c:63:5a:c5:c9:1e:36:dd:27:98:03:
87:ec:54:36:b0:bf:31:a2:72:ee:36:2a:63:03:d0:
72:7f:ab:f7:0a:16:c4:c0:4f:22:cd:e4:89:36:28:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:7B:90:76:08:B9:28:31:7B:CA:53:52:36:36:F3:A3:56:9F:64
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:06:ec:a6:1c:26:51:08:01:67:7e:70:b2:03:fc:ab:a4:71:
e3:bf:53:07:17:fc:fe:2c:e2:29:5b:bc:ba:1a:15:60:a2:a9:
af:34:18:29:1b:ad:93:b9:a2:86:15:dc:d6:10:5c:51:65:63:
da:bd:b1:4a:18:86:a5:57:bf:47:e1:5c:c0:06:66:6d:2d:8d:
f1:64:a8:c9:c9:31:35:a3:0b:c8:1b:24:08:cb:a8:60:f2:1c:
56:9d:4c:db:96:f3:37:43:ae:ff:88:05:2e:f7:f7:5b:26:bf:
23:be:e6:f0:10:c8:b2:00:08:d1:0d:6b:86:65:19:40:76:04:
ed:58:73:35:f5:d5:0b:b8:40:38:2a:7f:7a:10:d6:de:ec:c0:
7e:75:3c:9e:42:61:66:4b:43:3c:a9:9f:70:d3:67:b8:92:5c:
61:69:4e:56:04:a1:3f:63:de:89:ef:1a:e8:bf:48:85:28:42:
74:59:25:48:93:cb:40:c3:a4:71:7a:12:a4:93:5a:b1:ae:6d:
62:1a:e6:f7:47:a9:6f:29:e6:a3:e2:d2:fc:29:ec:2e:03:f1:
1b:2e:97:f6:b5:29:24:32:19:d5:0c:e8:ad:95:c8:cc:4f:f1:
28:b8:85:85:7a:56:21:69:8d:4d:99:a9:d5:05:17:62:74:dd:
b4:03:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:40 2025 by rpki-client