Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: yS+dPKShCyb67gHnsAEGBOHqA4frgazGlDcxLP8B4fQ=
Subject key identifier: 93:E7:52:3B:A4:73:8C:59:75:D3:E9:3A:75:BE:38:D5:51:05:CB:64
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 0198D705996CEDB0F8B64B91385B20E10C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 05B7
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: Ush220sJwUL1kZAIMkN2Ro+pR/a+OYqFqK+G+Zy9iao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:99:6c:ed:b0:f8:b6:4b:91:38:5b:20:e1:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=93e7523ba4738c5975d3e93a75be38d55105cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:4a:06:20:25:2a:6c:a9:ba:57:b7:2d:9e:
39:6d:39:2b:be:05:ed:97:68:3b:6d:f7:46:19:26:
c5:1d:64:5c:a6:b1:e6:d8:34:ff:eb:1b:91:3d:19:
d0:4d:6b:ad:82:c7:83:af:bd:ad:16:32:58:83:a2:
b6:5e:b1:5b:bb:78:0e:3a:7d:5f:8a:39:71:75:46:
2a:fd:0e:92:06:26:72:19:4b:7c:e6:1d:05:4b:7a:
72:56:ce:e5:e8:13:90:bc:88:02:68:75:ab:e9:81:
eb:a8:68:ee:db:9e:71:41:42:86:5b:a2:1e:a7:14:
be:79:5f:04:fe:aa:18:15:54:10:38:e5:07:f7:e2:
d8:75:7e:a3:58:85:90:15:ad:5c:20:d0:30:3e:11:
1d:17:cd:44:60:d8:d2:34:36:f4:3c:f4:7a:28:93:
28:88:a7:ae:e3:0c:e7:97:f9:f5:e6:1a:9b:41:e4:
19:1a:6b:94:54:2d:bd:a7:ed:7e:23:07:da:ad:f9:
9b:91:f7:db:32:3f:a7:69:11:f7:8c:de:4e:ea:5b:
5c:dd:57:12:7b:36:13:d4:6d:ad:97:fb:00:54:82:
07:81:4a:91:a5:6f:b1:66:4c:5b:a7:59:a9:75:0e:
be:27:8c:c1:ab:9c:77:16:ee:4d:a4:36:08:68:c7:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E7:52:3B:A4:73:8C:59:75:D3:E9:3A:75:BE:38:D5:51:05:CB:64
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:45:7b:60:55:03:88:62:da:53:da:99:b4:19:41:dc:54:d9:
f6:2c:1f:48:7e:52:a5:c1:a2:74:28:64:5b:89:63:9d:3d:cf:
1a:c7:b7:ff:42:61:2a:1f:70:37:bb:61:9a:29:5a:49:8a:d2:
7e:a9:80:fb:c1:60:38:c1:5c:5b:9b:89:07:2b:f5:54:ea:e7:
2a:e7:7f:ba:68:b9:93:93:5e:69:44:3f:dc:5f:81:72:53:0f:
ce:6b:6c:f1:30:5e:07:0d:73:f2:df:46:e0:9a:fb:73:5c:a4:
c0:af:66:10:b6:05:6d:5e:1d:a0:f7:28:ff:00:64:9e:a5:7d:
a0:cb:82:e0:a9:4e:d5:fb:82:c7:7a:f7:6f:44:d6:7a:a8:c9:
f9:f6:a3:55:f0:cb:8a:c7:5e:71:0f:df:5a:93:e9:2c:15:b6:
46:cf:fb:be:71:99:3b:5e:b3:e3:a5:35:d0:9f:bd:35:fd:2d:
96:45:74:b8:83:72:20:11:5b:8a:ac:2d:a9:6e:05:23:5c:76:
ae:a8:f1:ce:2b:b7:16:ea:4b:2c:4e:01:a3:2d:4f:23:08:40:
14:f6:be:de:82:b4:50:e4:c5:e2:3b:1e:cd:71:59:f1:b6:77:
7b:ad:9a:76:f5:78:f1:94:d7:95:7a:c2:66:37:c6:4a:21:d7:
fd:12:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:30 2025 by rpki-client