Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier: NPSSsE4PRIigS4+58mzDxD6PBNV+gm2rsUSiVphEMM4=
Subject key identifier: B2:82:C2:04:04:A0:F0:94:2F:DA:A4:92:C7:F9:46:94:CF:7B:A6:CE
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer: /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial: 0197B6A219E74100ABEFD1E62239E588FFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: KmFLEVQ5GLozrXi/mgBQ56+C44vyu7d78aavM5uW6f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:19:e7:41:00:ab:ef:d1:e6:22:39:e5:88:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=b282c20404a0f0942fdaa492c7f94694cf7ba6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:07:f2:bc:0d:3a:63:d1:83:4a:be:b2:a9:
6a:54:08:87:51:d9:07:c9:57:77:ab:45:98:bd:c8:
75:2d:46:4c:78:32:36:30:c9:84:29:a0:54:98:9d:
5c:fa:ed:8f:32:c8:ec:80:a2:e3:30:1b:a9:bc:e7:
3b:47:be:df:d1:f0:25:6a:bd:c0:4c:50:82:4f:a5:
bf:5f:1a:28:58:79:5b:73:fa:0b:9f:ad:f3:30:df:
4e:e1:0b:db:73:e7:23:67:29:d3:6b:5e:bf:90:41:
f4:9a:ce:59:db:49:e2:c9:36:74:81:f2:56:88:8e:
7c:93:cb:06:db:90:7d:88:a6:2f:8b:9f:3f:1b:a9:
66:12:49:b1:8e:4a:95:a3:0e:2d:54:9d:41:3f:fe:
2f:2c:c0:fa:47:72:5a:1e:44:28:6e:a8:fe:02:5a:
47:dc:82:bd:b9:d6:f4:74:f6:2c:2a:22:59:ba:13:
a6:08:66:76:d3:e6:4e:28:49:94:99:98:8e:c2:86:
36:67:c9:94:fe:1b:ad:a6:78:a4:c1:06:1c:c6:1e:
f5:5a:8c:47:e2:e2:ec:fc:be:2e:30:61:31:08:df:
88:93:73:db:5c:aa:74:37:45:39:de:07:fc:d2:9a:
f4:3e:db:0d:2a:a4:ba:ba:c7:4d:cc:0e:f0:9e:a1:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:C2:04:04:A0:F0:94:2F:DA:A4:92:C7:F9:46:94:CF:7B:A6:CE
X509v3 Authority Key Identifier:
keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:7b:2c:e8:53:7a:c2:99:ae:15:a6:3c:64:d7:ce:40:9f:
56:ec:df:8c:6b:41:bc:9c:d4:76:64:c6:d5:62:08:2b:db:aa:
c1:6b:bd:57:f3:39:18:7f:e3:15:94:77:a8:00:7c:ef:74:27:
db:8f:7d:e3:1c:cb:c4:1d:07:ab:62:7c:6a:6f:1c:52:7c:a8:
28:13:96:37:49:1d:fd:4d:e1:51:be:f1:eb:25:13:f4:83:2a:
95:68:66:13:d7:16:b0:1f:60:c7:d3:2a:8c:c3:1f:29:d3:0c:
a5:a3:09:8c:22:4c:f7:5c:22:0e:e4:3d:d2:37:e3:f2:d4:a5:
ba:ec:7d:50:ff:16:f5:69:4e:72:05:55:40:c2:ee:8a:d9:98:
4e:7a:a5:95:39:ba:6d:92:47:07:a6:c6:8b:9e:36:49:00:e6:
98:01:26:c4:13:d2:ce:c2:9b:ef:07:dd:ba:fd:e0:dc:f2:aa:
64:46:63:d2:88:57:74:96:01:1c:a4:df:05:1a:85:f4:a1:6c:
b7:1e:47:5c:88:6b:70:34:b3:a7:25:f9:de:37:3f:7a:9b:dc:
40:c3:17:c8:23:87:79:0e:9a:da:90:c8:d2:d1:41:3c:10:9d:
03:ff:ff:19:73:ed:91:03:09:a3:72:11:d3:7e:42:5f:12:f7:
3f:2b:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:38 2025 by rpki-client