Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: bx8P3khkyOfaBEdo9RQBdYoK60MwIgl8YGP8OzGn3ds=
Subject key identifier: 8D:6B:F1:6B:E7:47:07:D6:06:F8:61:D4:20:3D:D9:BE:69:66:65:85
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 0197B6A0EF28F0D2DA4E5E28724B03F223F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 11ED
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: PFvrBfI5eX17zq0fCXcKTTRNaNZ9FoFjnuMPCA9ucG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ef:28:f0:d2:da:4e:5e:28:72:4b:03:f2:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=8d6bf16be74707d606f861d4203dd9be69666585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:16:49:54:f7:3f:04:d8:a3:d6:1b:0a:6f:
a0:0b:7b:97:46:8d:b0:2c:f9:a6:85:92:18:d5:de:
4c:5f:82:06:0c:d5:1b:94:e1:c3:67:78:3d:ed:c5:
92:f3:17:1a:00:99:aa:b2:4c:73:d8:91:6e:99:48:
da:69:fe:c0:71:64:0d:ac:b9:ff:98:4d:a1:63:47:
29:48:7e:ec:91:79:80:92:ee:b5:72:01:77:90:34:
cd:6b:82:f5:b9:59:d7:1d:9b:cd:79:f7:66:53:bc:
bc:cc:32:0c:a4:7c:30:20:06:ed:66:cd:12:b7:4f:
01:e0:35:01:d9:2a:bc:f6:4e:15:f1:28:f9:6c:0b:
c6:32:cd:c5:a3:30:b7:92:91:97:92:e2:71:7d:12:
08:2f:a5:75:34:eb:c8:64:dd:83:3c:68:2c:75:45:
d2:cb:92:65:fa:c3:65:22:c5:1e:8a:87:88:01:89:
d7:40:36:cb:99:ad:d6:8a:0e:0a:43:51:59:57:20:
02:ee:85:26:08:d5:8d:28:f8:50:b5:3d:3d:7b:ed:
75:e1:05:ff:ab:13:ad:87:86:b8:ae:5c:86:e2:f0:
4a:7a:44:3c:8a:cb:c7:21:61:54:3b:91:10:67:b9:
76:de:06:34:0a:e1:24:a4:15:68:4b:76:87:f5:86:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6B:F1:6B:E7:47:07:D6:06:F8:61:D4:20:3D:D9:BE:69:66:65:85
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:38:89:8b:8d:d1:53:9b:3b:20:27:dc:08:b8:28:2f:2c:e3:
b0:8c:0e:22:9a:f2:1f:06:8a:ca:63:1b:d1:a8:47:c2:93:13:
3b:87:bd:a2:1a:d4:84:5c:48:a2:e1:d9:7e:4b:80:6e:72:6d:
3e:2b:8b:4e:78:ab:d8:30:86:59:4d:7f:19:56:b0:ea:16:a0:
c9:93:de:78:ce:a8:4e:ad:18:07:0a:5e:28:b8:89:a7:e8:e7:
9f:65:1e:ca:6a:11:ed:f4:8b:4f:df:a5:0d:d7:9c:a0:c4:ef:
a4:ee:27:f7:ca:d0:bf:08:96:b2:5e:e5:15:e4:3e:48:a0:54:
ae:2d:43:10:5c:cd:b1:e7:eb:c3:07:2b:56:91:1f:03:ac:ce:
17:34:e7:b5:a6:1f:f8:1b:ff:f5:cd:ce:d4:9e:68:13:24:d4:
a1:e6:9c:46:c6:b7:bb:0d:4d:60:40:78:09:00:7b:99:7d:3a:
83:bf:5a:d1:09:5b:a3:84:02:18:54:c5:fb:97:b8:67:eb:90:
4f:c1:4f:1a:ce:ab:64:11:07:08:af:a1:92:e4:e3:b8:44:5d:
08:4d:a1:b4:61:44:5c:5f:e5:c7:53:d3:f2:33:a3:f4:59:0e:
56:52:90:4a:40:ea:64:79:a6:d4:9d:70:b3:c8:d1:62:75:12:
28:e6:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:59 2025 by rpki-client