Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: 66Y60RkmD50a71m68/3wsa70+yjXLx4sDfxHJURdiws=
Subject key identifier: 4C:A7:2D:45:08:F7:4E:2F:56:C2:F2:DD:FD:2B:81:87:CE:FC:E9:78
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 0198D65FB4D24CE45679A4F087D8F2FD175C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 1282
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: tgIcA2olT55howtwjelp3EVieVBo7XfM9TBc0detVbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b4:d2:4c:e4:56:79:a4:f0:87:d8:f2:fd:17:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=4ca72d4508f74e2f56c2f2ddfd2b8187cefce978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:40:e1:d5:9b:15:f9:43:85:5c:16:e6:73:
4d:b1:df:7c:9f:f9:2b:b4:1b:56:8e:6f:9d:1d:3b:
76:0d:e4:01:cd:c8:80:56:e0:ac:0c:92:ee:37:9b:
0e:5b:2b:98:18:9d:4a:01:23:f7:b7:22:af:7d:c7:
f5:14:f7:d6:ef:74:46:44:49:51:b7:0e:00:1d:cc:
e6:a9:4b:2c:d5:75:35:1b:17:05:7e:05:9e:eb:77:
73:96:ac:f0:dc:ac:2e:e1:51:3c:85:fb:11:73:1e:
9a:00:bc:eb:d0:d9:eb:29:c9:5e:db:f3:bc:59:d4:
8d:14:5c:fc:9e:49:58:78:36:b1:a9:b0:20:39:33:
34:c1:a1:b4:8e:87:2b:f1:94:45:db:35:ab:d7:03:
86:22:2f:86:8b:97:dd:dc:43:0f:98:df:e0:ae:82:
76:95:71:8e:76:85:f0:79:50:bb:da:69:9f:06:d3:
58:44:d3:6c:7b:83:d3:29:4e:e2:16:1c:cd:f3:57:
4a:df:0d:cf:f7:39:5f:a4:98:fa:a5:54:47:a7:32:
23:c3:d4:a8:ec:ee:c0:11:a3:93:4c:a1:d5:8f:b0:
fc:06:50:41:04:59:86:e5:94:02:45:e4:51:28:b5:
92:ad:fc:7c:41:14:96:49:d8:70:6c:5c:6b:36:24:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:2D:45:08:F7:4E:2F:56:C2:F2:DD:FD:2B:81:87:CE:FC:E9:78
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c5:32:14:cd:fe:25:d9:14:e0:b0:cc:e3:06:76:2f:3e:1f:
96:23:4f:c5:03:b4:83:28:66:56:18:3f:57:0b:20:18:ae:94:
82:f2:89:cc:96:9d:3f:04:7b:9e:3e:72:03:b9:47:a4:bd:57:
dd:14:80:c7:53:7a:8c:26:93:dc:23:5b:9f:23:f6:76:50:31:
ca:2c:bb:ea:94:0d:a3:0b:31:ba:a5:07:73:c0:ad:fe:56:5e:
ee:fa:d1:bb:3c:31:a5:01:ce:04:f4:60:6b:1f:24:70:61:36:
1c:fe:e0:8a:44:67:8f:83:e0:c7:c6:6e:4f:73:3c:61:0b:7b:
ae:d5:c4:5e:82:8e:c2:06:f4:10:0f:aa:d8:e5:d9:fd:2e:bc:
ba:af:18:e6:f7:0a:19:46:b5:39:35:3d:83:10:e1:50:7b:11:
17:9d:2b:dc:92:68:f3:60:10:9b:d5:74:4f:41:f1:4f:86:8f:
29:de:16:35:98:4e:25:cc:63:b0:50:d9:5f:0f:85:17:5b:a1:
dc:b8:e9:aa:8e:3d:4b:6b:45:78:25:97:0c:af:e3:83:97:2e:
8f:5f:d4:a3:5d:bb:49:99:e9:75:48:cc:3d:d6:e0:4e:8b:83:
eb:b2:65:36:b2:73:89:06:d3:dc:ea:82:1b:55:4c:d6:9e:06:
e0:35:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:12 2025 by rpki-client