Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: SLtIFzw0uKfbtHGfY+4cJ/l+MehyicFge6ZZIF+CVrs=
Subject key identifier: A7:F5:B7:16:D8:AD:72:49:69:BB:98:38:FB:DE:F0:53:C2:6E:2B:8F
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 0197B6A125F2FF555AC83080F735F03B2BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 02AD
Signing time: Sat 28 Jun 2025 13:01:43 +0000
Manifest this update: Sat 28 Jun 2025 13:01:43 +0000
Manifest next update: Sun 29 Jun 2025 13:01:43 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: URLTYQ7XhJuVQmstjpV5QE7wM6jLB1kzETsBUpeme3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:25:f2:ff:55:5a:c8:30:80:f7:35:f0:3b:2b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Jun 28 13:01:43 2025 GMT
Not After : Jun 29 13:01:43 2025 GMT
Subject: CN=a7f5b716d8ad724969bb9838fbdef053c26e2b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:76:c7:28:4e:ef:5a:97:d4:78:46:e6:c7:
32:7b:04:55:d2:ae:13:93:29:80:5f:c7:07:56:74:
01:e1:3b:fa:fc:43:42:89:1f:03:35:8f:8e:07:3d:
32:a3:2f:f2:c4:5a:a9:39:7f:82:73:68:d4:e5:fd:
06:91:bc:71:87:9e:03:a6:b3:5f:f4:44:cb:eb:8a:
cf:c4:81:ed:73:d3:77:21:9e:15:53:00:f1:98:36:
59:e6:1a:45:ff:19:4c:99:f2:f7:8e:72:65:2f:1f:
dc:04:46:19:55:40:87:9f:c8:e6:2f:96:54:0a:f0:
30:0f:3c:09:66:74:a9:b2:2d:8c:f7:ef:d4:e3:bc:
8f:24:c3:4b:f6:9f:74:1d:07:f9:5b:e5:ec:6b:11:
9a:8b:10:14:15:ae:7a:02:35:e9:fb:70:87:81:69:
ff:cd:05:25:80:23:dd:ac:82:26:67:57:d5:99:a3:
78:e4:f4:cc:fa:7f:57:d6:ae:fc:1a:80:97:b0:c1:
be:b2:fb:b1:aa:17:0c:4b:7e:25:72:71:1b:3e:73:
4b:6a:b6:73:f9:e7:c7:55:a8:b9:aa:8e:73:38:fa:
86:6e:3b:07:b5:6b:51:bf:df:0e:c7:2f:cd:8f:de:
e7:8a:f3:9d:c2:86:1e:5b:30:61:52:ea:fb:2c:6c:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:B7:16:D8:AD:72:49:69:BB:98:38:FB:DE:F0:53:C2:6E:2B:8F
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3f:01:cf:33:ca:4a:d5:09:c5:5e:62:23:a8:58:e2:98:0e:
0a:82:17:e2:9d:12:90:78:52:88:2b:f0:f7:5d:ac:39:c0:70:
3c:18:b6:cd:24:35:96:1d:3e:f0:9a:68:05:f3:8d:7f:fa:f6:
ff:f4:a4:fb:12:ae:b0:7d:c2:4b:18:ff:b1:1e:90:7f:e7:11:
20:d9:57:a9:96:b0:ce:29:af:fb:3d:d4:b4:3c:fb:3e:3c:c4:
79:a0:e0:c5:25:8c:03:a4:5b:b6:41:ac:47:fb:aa:95:d7:3b:
28:f4:2a:7b:72:a7:b8:19:d5:ac:2d:11:d2:31:a6:83:87:8b:
27:1d:ab:44:e7:c3:a1:b5:ed:2e:e2:33:31:4d:50:01:77:d8:
e6:8c:68:79:4b:ee:3d:53:25:55:57:2d:ac:ed:63:43:04:34:
03:ac:c9:06:9c:22:81:39:e5:10:f7:9b:7b:88:35:90:5e:f3:
4d:ab:8b:ae:03:93:37:cd:9b:bb:27:97:a0:18:a4:b2:e4:f0:
dc:81:ea:08:d4:6d:f6:97:6c:66:1a:c1:ac:cf:64:f4:88:42:
53:bf:97:28:e4:4e:94:e2:bd:fd:c1:ab:bd:41:d3:be:f1:cd:
0c:e1:ef:8b:33:46:59:b9:3f:7b:ef:04:9e:41:83:1c:ce:6a:
e3:0d:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:03 2025 by rpki-client