Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: 1kVFzYPXF1yQ6tOMP+r+U6AAFZgztjHj72RxiLoVUeo=
Subject key identifier: 5A:ED:6F:3F:6E:1B:2A:79:06:B9:DE:04:3D:44:CD:6A:15:21:B7:70
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 0198D773B1F2341BB67F78A07FC42B93ECD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 06
Signing time: Sat 23 Aug 2025 15:02:20 +0000
Manifest this update: Sat 23 Aug 2025 15:02:20 +0000
Manifest next update: Sun 24 Aug 2025 15:02:20 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: 72i0QXXNFsvIZxadNYyh+rmUABSMxiHD2mihshJbLdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:b1:f2:34:1b:b6:7f:78:a0:7f:c4:2b:93:ec:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Aug 23 15:02:20 2025 GMT
Not After : Aug 24 15:02:20 2025 GMT
Subject: CN=5aed6f3f6e1b2a7906b9de043d44cd6a1521b770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:ec:77:f5:08:46:93:0d:22:b3:cf:c5:3a:
ed:ce:61:38:9d:ce:d9:1e:fa:dd:cf:a8:69:6c:1b:
b0:f4:06:d6:fd:b0:b2:43:8d:61:bd:9b:3c:19:57:
2d:b9:8b:70:ca:9d:7e:8a:12:e0:b8:bd:54:9b:56:
1e:7d:0b:51:a9:c4:e9:38:b8:ae:89:e3:33:04:93:
dc:26:89:e7:10:1f:c1:6b:48:4c:d3:a1:99:e7:59:
ef:f4:38:3c:ee:dd:83:6d:31:12:7b:6c:34:e6:9a:
4c:5e:a0:27:65:62:49:60:1b:97:d3:0c:aa:37:eb:
83:a3:b1:7d:3f:6a:8d:f9:29:39:1e:6b:77:37:d5:
0f:b0:e0:fc:c2:5b:10:e7:5e:2f:87:7d:b7:d8:70:
19:7a:26:6d:65:53:8e:f4:7a:21:cb:34:a4:6f:77:
75:68:16:d8:c6:43:d2:3e:c5:7f:bc:4c:aa:f8:da:
87:9e:03:ad:37:11:54:c8:64:52:14:52:f0:d2:2c:
f9:7a:ed:74:e8:8d:fc:5c:6d:da:d5:42:7c:b1:9f:
d3:41:e8:fa:f9:94:64:90:d8:29:5f:e7:59:fd:05:
0e:ce:01:91:2c:72:95:05:2d:07:0f:25:b5:14:9f:
82:34:66:6b:2b:02:e4:4c:e5:08:8b:2b:7a:64:f3:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:6F:3F:6E:1B:2A:79:06:B9:DE:04:3D:44:CD:6A:15:21:B7:70
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:70:e7:13:76:6c:aa:44:5a:50:5a:e4:7c:24:38:68:e9:32:
e1:00:86:03:c8:be:ff:63:42:b0:0b:90:ef:c3:85:de:a9:6a:
a7:9f:6b:ff:bd:6c:e4:77:96:36:2c:88:d2:3b:ff:ec:bf:ff:
f5:7b:3b:78:4a:75:7e:96:41:64:8e:9b:57:4c:88:ec:61:e1:
4b:ba:da:af:b4:a0:80:e9:69:e7:ab:0a:71:65:27:75:fc:18:
11:b4:fb:e5:c9:a3:64:56:8f:6d:2e:10:23:cb:1b:46:4b:60:
38:29:5d:e4:73:60:2d:5e:f5:9e:d5:8b:e8:52:94:e7:84:79:
50:b1:ff:6a:52:45:fc:de:df:fa:4d:fa:4c:fd:01:e6:19:f3:
f3:78:19:8a:d7:ed:76:5f:61:5d:00:cc:19:94:d1:5d:38:ff:
44:03:05:43:f9:96:58:64:3d:99:0c:5a:b3:63:11:8f:cf:29:
03:40:ce:c1:c5:82:81:d5:ba:bd:6d:78:94:ac:ed:75:47:73:
84:2a:6f:aa:0b:9f:bf:c0:0e:84:a0:ab:b4:94:4f:a5:5a:a8:
a6:50:82:05:ba:4e:36:a3:12:fb:8f:ed:9e:e6:c6:d9:36:fc:
de:fe:ee:8f:4e:a0:8f:6e:d3:1e:e4:83:6d:f8:15:c5:40:e0:
f4:13:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:29 2025 by rpki-client