Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: bXojZcFJqqMpkqDmna6+4yfqQc9F1Hp478Q3RRSvivM=
Subject key identifier: 42:E7:5A:E7:80:2D:F9:59:B5:30:96:4F:38:27:E6:28:6A:96:C8:10
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 0198D4725489FCC108B2A1DFEDC7640542A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 0341
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: fxkBwBXwd7TRDbOp+rq2+AbIoDRvFxYUy7UmZc8Druo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:54:89:fc:c1:08:b2:a1:df:ed:c7:64:05:42:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=42e75ae7802df959b530964f3827e6286a96c810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:6d:cb:e2:3e:cb:77:cc:6b:02:9f:79:76:
5f:3a:05:26:94:c5:eb:ce:e2:de:2e:30:09:c9:d3:
11:00:bb:f9:f0:77:be:92:45:d9:47:b1:a9:33:d6:
59:64:4c:67:77:f7:ba:34:6e:58:6b:22:95:ca:03:
08:c4:b4:6c:d4:05:7c:ac:71:aa:4a:c7:e7:c0:b0:
ae:60:0d:08:16:25:d4:93:29:fa:a9:e9:9b:ea:d5:
b6:35:7e:34:de:29:f2:75:f8:95:09:47:5e:91:ca:
2a:66:a1:a5:43:da:3f:92:4d:5f:c6:dc:ee:57:cb:
8e:74:93:fb:9b:44:f3:a7:13:18:9c:d9:bf:df:0c:
8a:ef:cc:cf:e2:f4:28:76:99:39:0e:b6:0c:a4:b7:
ff:05:97:dc:23:4a:50:2b:a8:56:3b:8f:44:24:f9:
0f:68:0f:3d:60:08:f4:ac:2c:a2:25:fc:cf:75:42:
1e:fa:85:fe:06:2f:0e:86:85:c2:e3:78:9b:19:96:
e3:ca:c8:e4:04:1f:72:c6:d2:fb:47:f4:37:61:0a:
6c:6a:4c:f5:4f:09:8c:2d:b2:04:af:7c:39:88:57:
31:2c:c0:da:9f:3e:6d:40:6e:0d:90:fe:58:78:54:
e9:52:d5:f3:34:95:d2:8e:89:91:23:ac:3c:32:34:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:5A:E7:80:2D:F9:59:B5:30:96:4F:38:27:E6:28:6A:96:C8:10
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:22:6d:55:b2:a9:52:a3:d6:1d:03:33:e0:df:00:d0:0b:df:
f4:62:cb:10:38:0e:f0:b7:b0:6f:67:8c:d4:27:1a:15:d7:d0:
ca:14:29:4a:fa:64:b3:c9:26:e8:a4:65:af:76:96:93:ac:67:
46:0a:ff:88:bf:67:2d:70:fd:19:0d:2e:f7:c7:ff:95:3c:21:
ee:67:f1:e6:d7:b6:53:d2:37:29:ad:e3:73:b7:52:16:52:a3:
e3:ae:29:74:ba:7b:f2:9e:c4:e9:e7:f7:5b:b1:14:8e:5c:be:
12:a7:b8:c5:1e:fe:29:e5:70:b5:89:df:89:1c:53:ef:a8:42:
e7:fe:15:44:59:c1:73:a5:43:17:b1:32:98:fe:a4:f0:48:f9:
ac:c6:09:f2:b7:a9:e2:61:ef:e2:fe:07:7c:fa:02:73:46:26:
66:c4:6d:89:c7:68:66:2b:8b:69:2b:7e:e5:69:ac:78:31:a4:
bd:3f:5b:74:6d:03:ed:44:e9:b3:5f:eb:ef:dc:2b:c6:3d:df:
81:22:28:26:23:cf:12:89:77:e7:c8:73:8e:af:e5:45:9e:ed:
2a:2a:5c:92:33:65:39:60:2b:8c:e1:03:ec:29:c3:b3:28:e9:
5f:a7:68:5d:5a:6b:b9:99:7e:71:04:99:19:36:a3:4f:13:a5:
3c:0f:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:16 2025 by rpki-client