Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier: nyTLPdyvlicpMmb6VF0J6KjkJja7V+0JWWm0p/HB9zE=
Subject key identifier: E3:95:C4:9A:CA:70:65:C0:09:9E:95:EB:58:D3:4C:14:EF:1A:7A:8A
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial: 0197B88F7B7AB840BB7F96D44B3C966F70D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number: 0CD1
Signing time: Sat 28 Jun 2025 22:01:40 +0000
Manifest this update: Sat 28 Jun 2025 22:01:40 +0000
Manifest next update: Sun 29 Jun 2025 22:01:40 +0000
Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: TQG0O3o/2UwWpwkx9/ApTRNR/oEqazAmJZufnmqTXDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:7b:7a:b8:40:bb:7f:96:d4:4b:3c:96:6f:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
Validity
Not Before: Jun 28 22:01:40 2025 GMT
Not After : Jun 29 22:01:40 2025 GMT
Subject: CN=e395c49aca7065c0099e95eb58d34c14ef1a7a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:be:ab:18:33:56:94:8b:ae:10:9b:ef:36:
ef:6e:1d:2f:a6:36:a4:8c:bb:91:9f:21:57:f2:17:
ae:00:9d:1f:5e:63:b0:ee:d3:b6:2e:28:82:10:f3:
c1:b2:b9:40:3f:17:a7:43:87:b9:f9:c4:da:5f:26:
34:3b:fe:3c:81:cf:7e:2e:61:8c:e8:1b:f3:24:39:
c9:0f:8b:c8:c7:57:9d:1a:cb:d7:63:a3:3f:e7:22:
d4:c8:bb:e8:25:0f:d3:2a:73:8a:f8:15:38:33:1d:
9a:27:aa:5a:dc:db:4d:ce:fe:1b:c2:94:7d:3d:ea:
8e:56:50:f2:fd:11:43:df:89:72:49:ca:55:b7:94:
69:42:e7:25:56:1b:7a:55:eb:05:66:27:71:75:05:
41:8a:27:61:8e:88:46:30:4c:b9:01:40:75:d0:8d:
f3:7e:40:d6:67:f1:62:36:d3:42:60:ad:9c:14:63:
29:23:9b:6e:1e:9d:3b:fd:ec:be:6f:67:57:42:f8:
e7:63:d7:86:e7:34:33:1f:b8:3f:6b:4e:db:62:15:
58:82:1b:5d:48:c5:d0:f7:eb:1c:69:b2:97:38:a9:
69:5f:8f:ac:30:94:c6:81:77:c3:55:07:7c:29:3e:
a7:56:83:f3:df:8c:9f:92:9c:6b:5b:0c:8c:c3:5a:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:C4:9A:CA:70:65:C0:09:9E:95:EB:58:D3:4C:14:EF:1A:7A:8A
X509v3 Authority Key Identifier:
keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:e1:b0:57:c8:91:39:b7:cc:fa:d5:38:1b:50:04:74:a7:ef:
c3:8d:4d:0a:03:90:1a:bc:aa:ff:4e:35:5d:c9:f3:ea:a6:3f:
94:f6:dc:c1:f3:ba:6e:b2:6f:9a:99:91:93:7b:89:9b:cf:aa:
aa:da:f4:7c:1c:5e:35:5b:1c:10:da:83:6c:53:1f:b2:98:1a:
8f:c3:bc:eb:db:83:c3:45:ce:e0:19:26:e7:69:9a:82:02:f1:
ad:a0:5a:de:f6:35:19:63:e2:97:57:9c:f1:ce:ee:4b:66:18:
8c:11:8b:1e:b6:55:de:06:dd:40:95:d8:1d:db:5b:3f:7d:2b:
e4:00:64:19:1d:db:a7:79:f5:78:14:7d:cc:0d:36:01:31:30:
2d:60:1a:74:5d:3c:a9:29:b1:66:12:17:83:53:79:ab:fd:23:
88:2c:c6:97:5f:4f:10:85:f4:6d:60:25:09:a8:b2:f4:0e:39:
f5:c5:ee:17:9c:f5:eb:da:e3:9d:28:f6:af:33:27:fa:d1:72:
9e:6b:ac:d5:f7:57:b6:64:5b:46:37:e4:e7:07:cc:ca:7a:e2:
8d:cb:65:4d:d5:49:22:16:0d:f4:09:4d:72:10:2b:2f:72:b1:
4c:85:41:7f:97:41:8b:f0:e8:6a:eb:33:30:13:31:5c:9d:b1:
ee:3d:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:54 2025 by rpki-client