Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: I7CeT2HzcNTmIVBIbJ+4GbQTUEpn61vYiqtjgzTyEd4=
Subject key identifier: D5:DD:4B:3A:7F:82:FB:62:1D:CA:8B:5D:C0:78:CE:43:B7:51:96:2B
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 0197B6D78F78B20B9354F8E4C8971D1EC8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 1530
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: eQJIyWwUfZ0YOJKVbJsubts7if1Tdy+Gyv1gf1tdYvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8f:78:b2:0b:93:54:f8:e4:c8:97:1d:1e:c8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=d5dd4b3a7f82fb621dca8b5dc078ce43b751962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:af:65:66:ce:d9:b1:60:9a:23:6b:a8:22:
cd:30:f4:31:b2:10:74:c4:11:22:01:9a:58:b7:c1:
3f:e5:d8:eb:e1:5a:72:79:68:54:15:83:e0:d8:e1:
8a:1d:4f:4f:93:1b:49:b7:c2:c9:61:ef:39:27:71:
88:e7:59:21:83:e0:e3:19:ff:2a:09:5e:09:85:d9:
55:20:48:cb:da:3a:85:57:f1:ae:de:14:5d:de:fa:
03:24:b8:08:27:f0:e0:98:f6:c4:d6:19:7c:91:19:
4d:03:08:6f:75:46:60:f2:64:ae:5e:80:94:dc:11:
0c:7e:e7:5d:53:5f:fc:4e:62:3d:79:5c:48:1b:96:
26:d8:45:8c:0b:c5:3b:4f:14:b6:00:f9:55:1c:bd:
37:3f:12:96:f8:d2:30:29:bf:0d:ab:69:c1:1a:2e:
e9:6e:13:83:1d:03:c8:6d:2b:22:76:4b:d4:08:71:
3a:0e:3e:d0:31:7d:ce:e1:66:da:05:4f:b3:70:cd:
f4:d9:0e:3c:3e:cf:0b:ab:ac:9b:b3:77:4a:f2:31:
6c:a4:e0:56:65:89:84:7e:e7:ec:33:17:40:1e:5a:
39:32:cf:2b:7f:9e:59:af:af:a9:b3:f5:c9:7e:4c:
98:6e:6a:b6:39:3b:7c:3f:85:d1:00:bf:c8:f6:5f:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DD:4B:3A:7F:82:FB:62:1D:CA:8B:5D:C0:78:CE:43:B7:51:96:2B
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:a1:08:db:fd:46:98:a4:a0:67:9d:be:6f:00:cd:d2:e8:
23:9a:4f:f9:e4:d9:87:7e:06:c3:93:13:8e:e6:d8:42:90:94:
86:df:bd:2c:6b:e4:0e:fd:6a:de:3d:a8:62:77:7f:3c:83:28:
65:67:d2:a3:ed:aa:74:6c:be:47:91:26:ed:e0:fe:c0:87:11:
eb:c1:1e:0e:9d:c1:8e:68:2c:5c:de:fc:a4:2f:69:91:d9:18:
21:41:50:99:24:37:69:91:e5:2c:6b:fe:d5:5d:e6:f1:3c:b9:
46:a7:0d:bd:ca:4e:51:44:af:c0:b2:32:a2:14:ac:2c:c0:23:
2a:4d:09:3e:b9:30:12:2f:40:d9:bb:02:83:05:52:45:12:93:
a2:11:72:72:61:07:0b:76:3a:89:86:61:22:43:f3:7c:f5:6a:
46:65:78:46:8b:8d:71:a9:d2:76:d1:1e:e5:70:8c:ed:31:4d:
62:ba:43:e4:9e:61:fa:79:34:c9:7e:a1:42:c4:12:10:ce:b9:
43:a6:81:c7:c6:f2:36:ce:c9:77:5f:2b:5a:01:a8:f0:99:21:
a2:51:51:ba:f0:7c:31:ff:8f:c8:b8:dc:07:86:99:2d:8b:fe:
60:6c:69:a8:41:f5:08:f8:f6:d4:b5:0a:dd:ca:8b:da:d7:e8:
4a:6b:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:52 2025 by rpki-client