Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: 7mplTOprUzlWkpsGLtTrSYsOpMMToNwODb1qESRL1oM=
Subject key identifier: BE:E5:EE:E7:45:B5:AC:6E:3C:16:F5:12:40:74:A2:D9:50:1E:83:81
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 0197B74529F07C59C5A705A26D7DD0E000A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 11AD
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: t3LiENqkecU/g7ZHWKK7EmUdUVDxJDo9hbIm3xsmTlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:29:f0:7c:59:c5:a7:05:a2:6d:7d:d0:e0:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=bee5eee745b5ac6e3c16f5124074a2d9501e8381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:ce:b4:00:19:70:e1:34:ca:37:13:cb:53:
94:c2:03:b1:6a:30:42:b2:8d:bb:c5:4d:c4:4f:0a:
11:66:20:fd:5d:43:9e:cf:51:8d:7a:a2:35:ba:c4:
b2:88:9c:a0:cd:8f:ba:6d:77:54:2c:f4:98:c2:3e:
4f:68:aa:03:22:e1:79:22:7b:9c:88:1a:f3:4a:68:
28:36:66:a3:10:84:51:ff:34:46:18:75:1c:71:9e:
6d:2d:a6:4c:fc:a4:4b:af:53:30:64:19:bf:ed:ac:
e3:c1:84:63:ba:65:15:30:d1:d0:20:25:b7:48:09:
75:bd:ba:92:22:4e:5f:0d:74:92:62:4f:60:28:2f:
06:5c:d3:11:ee:73:3d:b9:b7:b7:f2:22:66:1c:19:
03:6c:5b:62:8c:41:68:e3:ad:db:34:bd:ec:ac:65:
a5:13:0c:a8:48:e0:b5:2a:2b:5e:5c:05:b4:37:53:
cd:e1:b3:f0:58:b1:4a:8f:fb:6d:a5:8d:f4:1f:3a:
0d:06:09:70:5e:2f:8f:62:57:1b:a1:d8:8f:ab:a2:
a7:ed:92:2d:a0:f6:68:fa:d1:eb:f9:8e:f4:36:b6:
d1:23:22:49:70:a8:18:87:40:b3:21:65:49:70:3d:
f4:d4:c0:3b:60:03:1c:17:ff:4e:02:f9:75:72:c6:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:EE:E7:45:B5:AC:6E:3C:16:F5:12:40:74:A2:D9:50:1E:83:81
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:85:86:a6:ac:3c:89:18:e3:f3:9b:23:78:8c:3e:dd:f7:6d:
f1:b5:c8:09:97:ca:08:b4:ca:c7:50:0f:d4:4e:64:4e:57:15:
22:9a:40:17:10:dd:05:61:93:e4:7a:c0:f9:a2:62:72:97:3f:
d4:10:5d:dd:96:b7:cd:5c:11:13:10:bf:9a:18:7a:64:6f:e7:
8d:a4:e8:c0:70:8c:44:ed:7d:34:a2:87:54:f5:47:f6:59:e8:
3c:b5:06:22:b7:55:46:6b:9b:93:01:97:21:58:3c:71:1f:84:
a3:a9:fe:82:3e:d1:fe:29:1e:02:28:76:f4:d7:6e:a5:d3:59:
11:c3:e2:f7:01:e6:07:60:3d:15:3d:62:a2:72:bd:3f:8e:48:
f6:31:51:79:e9:33:0f:cc:0a:50:1e:8b:c1:31:2a:5a:3e:48:
27:ff:2e:db:18:14:ab:2c:52:bf:d0:70:4c:1c:99:74:dc:0b:
0a:60:02:d7:f9:21:9a:d6:ee:35:02:d0:c3:a1:b8:2a:5f:8c:
92:fa:58:e6:26:d8:6c:84:76:ed:8d:85:02:7f:2b:6c:08:77:
82:54:8f:d6:c4:c4:72:64:e9:e6:13:ce:81:c3:4f:ec:49:45:
19:e3:9f:d1:c7:b8:f0:49:2c:ba:16:fc:4f:d1:da:ae:de:df:
40:8c:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:45 2025 by rpki-client