Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: 4SSpbGv4ljVwIRwkNNr//qgRVp9BQfrUikSliHe3Mf0=
Subject key identifier: 22:A5:C9:46:3A:BD:6B:86:71:44:CE:9F:A4:9B:AC:DA:5D:06:92:64
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 0197B6A2175691A9F9586FF621B64F986011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0DD0
Signing time: Sat 28 Jun 2025 13:02:45 +0000
Manifest this update: Sat 28 Jun 2025 13:02:45 +0000
Manifest next update: Sun 29 Jun 2025 13:02:45 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: atMjN/l0jg9sVcVNUvP947jnk10IGuJqMrLFYAhZ2Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:17:56:91:a9:f9:58:6f:f6:21:b6:4f:98:60:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Jun 28 13:02:45 2025 GMT
Not After : Jun 29 13:02:45 2025 GMT
Subject: CN=22a5c9463abd6b867144ce9fa49bacda5d069264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:79:72:4b:5a:cd:67:15:a1:8c:a2:53:3f:
bb:12:a2:b5:7c:fc:d1:a0:a6:03:b6:37:5f:b8:f9:
f5:6d:c8:b4:64:bb:87:91:34:dc:1c:d1:98:0f:ff:
79:5a:eb:12:1f:a6:93:ae:43:de:72:3b:c1:36:b5:
09:73:2a:b4:c9:f1:4f:24:bb:27:d7:84:35:c8:44:
96:7e:95:fc:44:04:fc:29:3c:b6:00:9a:e5:ac:5c:
cf:0c:35:f9:5c:5a:4a:71:2c:a4:b0:5d:72:31:09:
17:a2:11:54:85:d7:c4:c6:e1:db:06:7c:11:cd:11:
30:80:db:b4:9f:74:d9:e6:3a:32:74:22:a1:26:49:
42:cd:b2:11:d7:3e:24:28:aa:0b:82:94:91:05:31:
86:04:c7:fa:00:29:b7:2d:2f:ca:b8:4c:10:db:0c:
07:b4:4c:40:de:24:67:a5:30:13:39:e1:46:b9:3b:
c9:3c:22:cc:e7:6c:d7:00:a4:d6:e4:d5:10:eb:15:
79:79:d3:a2:ba:9e:e6:08:4e:3b:4f:a8:d7:7b:9a:
10:1d:0e:20:c7:10:95:5f:0c:c5:07:20:46:b3:fa:
03:ed:ea:04:37:26:9c:24:58:c6:7f:e6:62:43:05:
26:e4:53:34:d2:72:33:aa:88:44:01:8c:6d:f4:cd:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A5:C9:46:3A:BD:6B:86:71:44:CE:9F:A4:9B:AC:DA:5D:06:92:64
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c4:97:ab:6f:87:97:c4:5e:b5:c4:a4:dd:6a:ae:98:13:b4:
08:ff:33:da:9e:f2:91:d7:96:a9:dd:74:68:9b:70:bc:2b:63:
55:d2:bd:1c:a2:e0:a7:b9:29:ef:94:89:c2:5d:94:85:9b:ea:
2e:5a:97:b5:ed:6d:f8:11:d5:16:f3:39:04:af:22:5a:5d:c7:
31:3a:5a:e2:c0:c4:00:45:13:87:d5:db:0d:43:1f:b4:ed:3b:
ae:41:e5:a9:80:ea:14:88:64:c0:e0:8a:62:92:c1:a8:11:6e:
25:1b:71:52:32:15:ff:7b:41:84:4a:5a:5f:fc:53:08:3a:57:
31:f8:95:c2:11:65:60:54:8e:2c:ee:69:14:c2:ac:9b:81:f1:
b1:d6:d8:da:c0:70:da:62:e7:b7:bd:c5:96:bd:ea:3b:64:44:
6f:f6:ab:c6:0d:ed:99:a6:d9:6a:fd:6c:48:21:d3:21:d4:a2:
09:17:72:c7:47:1f:a1:78:8a:42:32:57:4c:b7:3e:e2:fe:c4:
79:88:a0:48:f1:e1:a4:26:0e:50:b5:f0:9b:6c:da:ee:8a:3f:
7e:15:bf:23:43:7c:28:80:4d:6d:75:34:93:f5:2d:9a:93:72:
49:1f:65:b0:dd:82:55:bb:7f:61:31:ad:6d:b6:51:fb:9b:3a:
54:35:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:48 2025 by rpki-client