Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: /o9yH87Iz3unUMQEhP9Rh68QTH5h3NYbj9tKe/I9ZVc=
Subject key identifier: 78:7F:9C:84:EB:92:D0:FD:73:A0:99:12:21:FB:4D:B9:48:C3:DA:4F
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 0198D73B6F4B4E3E90AE0B181E3E3D155C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 14:00:53 +0000
Manifest this update: Sat 23 Aug 2025 14:00:53 +0000
Manifest next update: Sun 24 Aug 2025 14:00:53 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: AJpazhTCK06Zh4NhVBUhYdpA8doyt58i5gdJukiHzIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:6f:4b:4e:3e:90:ae:0b:18:1e:3e:3d:15:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Aug 23 14:00:53 2025 GMT
Not After : Aug 24 14:00:53 2025 GMT
Subject: CN=787f9c84eb92d0fd73a0991221fb4db948c3da4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:e6:61:7d:a3:b4:24:03:f4:83:8e:4b:0d:
a8:20:3e:88:2b:f9:24:4a:fb:2f:dd:b4:24:2e:8c:
d3:c3:32:2f:24:96:22:b3:89:6a:a9:c0:1f:bc:6b:
20:b4:48:c7:f1:a2:5e:2b:17:df:80:da:1a:6b:bc:
5a:84:ec:4b:12:5e:e4:0c:f4:07:20:e2:72:c6:72:
08:7f:0c:1f:b0:39:69:cf:85:f3:13:55:5e:18:b8:
08:ed:15:2d:97:f5:c3:4a:44:9f:20:cd:c3:0a:a3:
f4:77:41:c3:51:57:95:e1:e5:aa:7f:3a:f9:62:73:
2f:87:c4:00:13:c5:1d:35:8c:64:9e:da:61:8a:c2:
33:d9:d1:24:c3:c2:1e:85:13:be:1f:3d:b0:2b:25:
39:93:96:bc:bf:2c:be:6d:7b:71:55:62:08:34:7a:
70:be:ca:51:7a:07:83:d0:15:12:e0:3f:df:28:f5:
bc:0f:11:0e:7f:d8:37:52:c7:e9:01:b6:62:2c:91:
e2:c1:a8:f5:2d:44:f9:50:fa:e3:10:3c:af:ec:38:
63:77:26:a6:a0:94:f1:f3:53:64:b3:ac:7f:a7:f0:
5f:b5:64:f8:f1:37:b8:0a:cd:b9:04:94:b0:d2:48:
5f:2d:87:a0:a1:4c:57:ea:35:aa:ce:bf:39:fd:73:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7F:9C:84:EB:92:D0:FD:73:A0:99:12:21:FB:4D:B9:48:C3:DA:4F
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6e:89:72:23:a0:58:81:ea:a3:fe:aa:6e:79:5a:ae:b2:06:
e1:4c:cf:23:c4:98:16:15:4f:5a:bb:3c:65:91:38:5a:54:e0:
b9:b3:64:51:3f:53:9e:83:d5:1f:01:bc:bc:e4:64:94:8c:e6:
8e:95:10:d9:9e:7f:89:16:65:dc:19:25:f9:70:e3:ac:09:36:
f6:3b:85:7e:1c:cb:d6:92:b7:57:14:eb:24:6c:3b:d7:d8:fd:
19:8b:bf:94:0c:5f:22:d1:d4:85:7c:b6:09:d6:49:ab:4b:37:
d2:e7:88:61:c7:63:a9:93:57:10:71:bd:80:72:e3:e4:c4:dd:
68:51:61:3d:ae:18:4f:bd:43:18:a4:2a:f4:ec:ed:5e:e5:73:
a5:6c:ef:56:1c:32:2f:7f:02:bd:bb:c0:7e:62:8a:0b:5b:ab:
e9:81:72:43:42:6a:c5:e0:2a:b2:8d:cb:73:74:4e:16:a0:42:
84:45:4b:cb:fd:72:ec:cc:3a:e8:a6:57:2b:dd:cd:3f:ef:7a:
3f:8e:b8:ee:ad:c2:6c:8c:e3:a2:29:47:5e:c3:7d:e7:bf:ac:
58:34:e5:6e:32:bf:15:b9:54:29:7c:28:64:53:1b:a7:7c:fb:
7b:20:1c:38:47:05:a6:30:de:21:95:69:72:2a:3f:7e:c5:a0:
d2:8b:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:55 2025 by rpki-client