Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: cYWDmYsXtKhqnM8Lh7bnHhuSHYRDhFXavOXtJYqVkQY=
Subject key identifier: 3C:5D:10:9A:E1:CB:F9:E9:8E:09:B2:C8:B6:27:C0:8C:08:D4:73:29
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 0197B6A1EC868055621EC88620CA4DD55530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: XB5wT9ToEOZEJ0vSwGdFn4oqnRgQZv0zu7KLBIIuUYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ec:86:80:55:62:1e:c8:86:20:ca:4d:d5:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=3c5d109ae1cbf9e98e09b2c8b627c08c08d47329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:d0:c7:1e:ab:4a:8c:63:ec:5f:65:1e:62:
70:96:32:1a:a0:aa:15:2c:1a:17:48:58:85:9f:4d:
6d:20:d2:c3:76:b8:58:32:8f:11:a0:17:b0:f2:4c:
ad:72:ff:ea:57:91:ed:15:e1:1b:76:fa:80:21:79:
17:a0:68:ed:57:e3:4f:84:a8:ca:d5:f9:6e:83:06:
ae:42:c3:b9:7b:41:4a:d6:a5:92:44:04:e0:8c:df:
b5:92:66:eb:bf:f7:89:30:57:8c:0f:31:4a:24:7f:
3e:fa:52:4b:01:fb:ab:3a:c3:b6:fe:ff:d9:40:3e:
31:a5:8a:31:66:e7:1a:03:e6:c6:61:00:c8:d4:2d:
0e:64:c2:e3:8b:10:f6:89:54:77:92:c7:0d:7e:c6:
51:8f:d7:d7:3f:a3:83:1c:04:b0:46:23:c8:6d:6b:
03:57:fa:33:d4:5e:09:99:f9:df:51:86:59:a1:6c:
40:8a:31:85:73:87:c9:94:5c:30:b9:21:d4:23:9d:
cd:b2:4e:e8:34:4d:26:f4:8b:34:58:c5:55:44:3c:
55:e5:78:b4:98:e1:d6:49:0c:6a:83:7d:62:81:2a:
f9:3c:69:3d:18:89:87:c3:4f:98:bf:2a:3e:0a:84:
05:2a:95:92:d6:5b:dd:e1:21:a2:32:62:df:d4:56:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:10:9A:E1:CB:F9:E9:8E:09:B2:C8:B6:27:C0:8C:08:D4:73:29
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:85:54:a2:ec:dc:37:29:9b:58:73:21:63:37:00:f3:04:
ca:a9:f3:a7:41:fc:ee:7d:24:8c:47:d0:86:03:7c:f9:91:b8:
ce:eb:c8:7e:60:f3:42:e6:4e:0a:57:4b:ef:df:15:ac:39:7a:
9c:d1:bc:d2:3a:d2:7c:bf:df:fc:dd:a5:33:95:2a:9c:2d:d1:
6f:cd:ef:4b:0a:df:b5:68:40:c5:45:1e:ce:3a:e9:45:59:ce:
75:20:21:cd:e2:18:89:a8:bb:17:75:1e:db:bb:a3:91:00:6b:
a1:fc:ee:68:43:a7:52:f8:af:af:4b:f7:ee:70:95:cf:81:97:
3b:4c:29:a6:b9:2c:eb:85:5a:86:c7:56:ed:48:06:c2:e5:9f:
52:0a:4a:e5:ae:40:2e:23:6c:2d:7b:ad:4b:05:f2:d0:46:1b:
51:5c:27:fc:6e:6d:6f:37:27:cc:3d:eb:2e:6b:81:c3:d0:0a:
ec:b1:53:1b:22:46:44:1d:4e:86:c4:62:0f:04:ed:b6:6a:57:
97:18:9c:fd:e9:2e:4f:ee:12:e4:02:f2:06:7a:bb:86:b8:29:
ff:66:a6:8d:2e:e1:e9:58:17:06:e2:f2:be:ea:3e:04:e1:c4:
87:b9:24:56:46:fa:14:10:c5:11:20:41:6b:51:57:47:59:a5:
c5:96:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:19 2025 by rpki-client