Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: waSvV0M/kQXV/tGjWvyumlZqoXBaRYAGzIFcfpIyqoo=
Subject key identifier: E4:6B:24:ED:9C:CD:1A:0E:CE:F6:CF:EE:DC:8B:E7:FF:6D:A0:7D:70
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 0198D472E4346F053A1CBD6A9C0D01EF8E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 1407
Signing time: Sat 23 Aug 2025 01:02:35 +0000
Manifest this update: Sat 23 Aug 2025 01:02:35 +0000
Manifest next update: Sun 24 Aug 2025 01:02:35 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: URQL02+gpfRSsQmSq/oMX0POHDjEdI0hifHXPsLfXQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e4:34:6f:05:3a:1c:bd:6a:9c:0d:01:ef:8e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: Aug 23 01:02:35 2025 GMT
Not After : Aug 24 01:02:35 2025 GMT
Subject: CN=e46b24ed9ccd1a0ecef6cfeedc8be7ff6da07d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:d4:8a:d1:1c:ac:ac:4c:c6:96:76:a6:44:
7a:d7:33:81:6a:ea:07:cf:02:72:11:5d:7f:30:ed:
8a:e9:a1:af:c7:af:aa:63:ab:de:d5:3b:67:a7:42:
07:64:ad:76:58:96:bf:dc:f4:b6:be:60:68:5b:16:
40:74:a3:88:01:15:56:26:fb:33:ce:a4:ed:69:18:
04:4d:92:51:51:13:b3:df:64:08:eb:3d:45:b5:25:
80:27:e3:79:96:37:f6:c1:83:e9:30:25:c6:71:99:
4b:73:bf:d2:b4:ce:8c:35:1a:1c:15:2c:49:50:87:
08:2a:f5:c7:95:61:ac:0d:70:b7:18:ee:56:9c:54:
44:a9:cc:ed:36:39:9e:17:67:cd:c6:e0:6d:85:84:
d6:50:2d:f3:ff:a6:88:a4:cd:63:1a:dd:5f:5b:76:
c1:0b:78:24:bf:47:e5:ca:d6:2c:12:06:80:bc:6a:
27:59:aa:e8:da:f4:14:d7:b9:81:91:36:fe:e5:7f:
ff:5f:0a:95:bb:ca:74:fc:27:c4:9a:ae:0a:64:89:
62:4d:d1:14:b1:9d:9c:28:68:4a:78:4d:94:48:ae:
bc:67:81:5b:03:2a:0b:57:12:ad:7d:5a:46:28:27:
7b:45:8a:76:03:80:2b:04:04:3c:ed:7e:30:d8:80:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:24:ED:9C:CD:1A:0E:CE:F6:CF:EE:DC:8B:E7:FF:6D:A0:7D:70
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6d:06:a1:ba:29:27:d8:aa:f6:a9:6e:52:4a:56:d9:f3:f1:
02:1e:86:ae:86:03:ea:d2:cf:49:bd:0e:34:dc:30:a3:f1:ee:
66:d7:8c:36:4a:87:57:bd:61:f9:40:d5:2f:ba:30:82:4b:42:
1e:05:5e:3b:16:d3:91:89:b0:04:41:17:a7:97:2e:1b:b7:57:
17:f0:79:1c:a4:69:83:1b:d6:5b:e3:80:bf:ea:0a:09:15:82:
39:be:78:5d:dc:a2:9f:aa:54:2c:50:a3:89:f1:44:af:20:36:
c3:b4:22:37:c5:9b:bc:68:74:ce:f2:60:42:40:36:f4:75:99:
c0:53:11:78:3c:57:e5:72:4f:0a:0a:3a:02:a0:93:3f:9b:30:
4e:9a:a8:d0:9b:33:39:b1:27:12:13:8d:15:b1:82:83:03:50:
62:9a:bf:33:d8:9d:c6:f3:64:43:8c:c7:fe:33:cb:f9:e5:0d:
a3:29:ed:0f:66:8c:6e:0e:8a:b0:ca:4a:2c:1e:6c:f9:6c:63:
12:3a:ea:54:ee:b7:cf:a5:31:28:59:7e:32:b9:fe:9c:86:69:
6e:af:9b:99:91:13:6d:08:84:04:87:8d:95:4d:7c:ad:f5:c2:
1f:7a:37:d6:5f:69:b0:1c:c4:7b:d4:7c:7f:97:08:9b:a6:d1:
91:91:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:54 2025 by rpki-client