Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: AOGJQdSdZ3+VOMJwpmqEpKLQozF1M1LYkrqZfX4b6Wc=
Subject key identifier: 63:E7:B5:4E:F0:E0:53:7D:BB:62:22:10:AA:FB:20:91:00:39:26:26
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 0198D5162DAD1350C1546E5677528B12AE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1241
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: wxb4+oNgw1xlq0bUXK41qNwdRR4gwynJl/FRND/z62A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2d:ad:13:50:c1:54:6e:56:77:52:8b:12:ae:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=63e7b54ef0e0537dbb622210aafb209100392626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:51:fe:40:93:5b:af:c9:ef:10:25:57:a8:
19:1a:ce:4d:c2:3f:75:6a:21:5c:e5:34:06:b3:cb:
39:dc:dd:76:d5:09:b2:34:a0:f4:24:35:81:3d:be:
07:4a:51:75:bc:fe:d4:7d:53:20:2d:03:4a:ec:54:
99:90:1d:7d:b3:60:a2:5b:e1:c1:aa:8b:e0:06:ba:
b8:75:1d:74:ad:1f:e6:16:87:76:5a:fd:58:b6:de:
ab:f6:a8:dc:94:0c:c4:32:5e:a6:73:3d:31:68:49:
1c:73:d5:19:82:fc:17:dc:aa:71:09:1f:7b:ae:7c:
09:f4:6e:87:08:4f:29:e0:b3:6f:a1:0d:0a:eb:82:
8b:64:99:93:f8:ef:a7:0c:79:3a:29:be:81:49:ca:
18:a8:a5:9e:92:3e:1e:e3:16:75:1b:c7:0b:1b:f1:
e1:1d:8b:4d:7b:67:a0:a3:b6:4a:7b:7e:4e:39:26:
28:45:65:e3:bf:f9:10:73:dc:4f:98:8c:c0:cd:8f:
8a:22:8b:32:d0:43:64:c5:c9:bd:d2:0c:54:e8:1e:
ac:b5:82:2f:12:53:d6:ba:ed:65:ab:92:b7:67:ae:
bf:d1:f0:48:37:eb:6a:9f:e9:ff:f9:b6:17:47:1a:
21:d3:30:bf:b0:fe:d4:30:db:c7:67:cf:f5:0f:29:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:B5:4E:F0:E0:53:7D:BB:62:22:10:AA:FB:20:91:00:39:26:26
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:13:ab:64:96:98:d0:72:f5:59:f9:7e:a8:8f:d9:fc:f5:6c:
11:61:13:ca:79:8a:ae:9b:a5:f1:76:99:5f:29:5b:f5:fb:14:
60:74:9d:b6:b1:34:10:22:76:5d:96:a1:1a:98:7d:f0:a0:c6:
2e:4e:3e:44:7e:78:b1:cb:e9:72:7a:20:2b:4a:2e:4b:24:38:
79:c6:93:75:fb:13:41:1e:42:fc:e7:c9:f9:21:49:6b:09:98:
5b:82:e3:9c:e8:e4:c2:72:73:7e:7e:47:06:c2:07:94:14:b7:
80:c7:ef:ae:1d:a7:8f:b0:60:c0:0a:42:0e:04:f2:72:f9:b6:
13:d9:20:6c:41:f3:27:e2:a2:24:75:59:60:aa:ae:8c:b2:e0:
fb:35:81:d5:46:79:b5:39:28:b2:f1:9c:7c:17:e4:eb:a5:71:
16:f0:d6:4f:3d:66:01:56:83:ca:ad:93:dd:3c:b3:bd:f8:ad:
ef:47:1f:fc:de:1f:f1:c7:8d:45:f8:90:8d:a2:81:fc:45:71:
f0:cc:c7:1f:fd:87:ae:d0:e8:f0:0f:ef:6a:66:c4:b8:46:0b:
52:97:8c:1d:90:6d:8b:a3:68:16:1e:b4:d5:2d:ec:61:36:ab:
a4:73:5e:0d:ef:a0:75:02:37:94:e2:16:6a:af:d5:a9:c8:86:
f1:1c:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:50 2025 by rpki-client