Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier: WjV22TGQulSMnxRm3zl+19w6wchHcr5Zo0/Vc4sG5iQ=
Subject key identifier: E1:F2:3E:64:20:13:62:92:F0:9C:8D:DB:E9:90:CA:E9:85:79:7B:EC
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial: 0197B77C3FBEEC3E886D729BE9CC3748E6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number: 7E
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: JpplF1tgTArGCQzjHYNlZzBTP7v8kLEAiaWsXngGZa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3f:be:ec:3e:88:6d:72:9b:e9:cc:37:48:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=e1f23e6420136292f09c8ddbe990cae985797bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:e9:b1:d7:8e:7c:da:49:48:db:58:a5:b9:
94:ba:26:ed:af:e5:58:1a:f0:62:ae:7d:56:6f:1d:
6e:43:a6:82:78:52:dc:43:b2:58:27:8f:ba:97:55:
6a:a1:1d:1b:7b:1e:1c:33:42:c1:8d:b3:1c:aa:30:
94:6b:ae:d0:de:5e:85:d7:f5:aa:ab:8d:3a:3f:50:
77:0b:b8:73:34:82:1a:ee:da:c2:5d:ff:5f:8e:99:
3d:89:c1:38:5e:07:d1:bf:72:1d:02:9f:a9:35:e5:
bd:0c:e0:57:57:8a:59:3a:b0:e6:3b:75:9b:6a:b1:
2b:e9:65:66:3e:9f:29:f1:12:14:93:df:75:3e:36:
03:9d:9c:26:b3:7a:79:f9:08:6e:2c:af:99:5d:49:
54:7f:bf:b8:99:1d:e6:a5:42:04:7c:dd:8f:a7:56:
16:20:89:4c:29:24:9e:7c:71:47:3a:ad:47:30:30:
47:e7:7b:3c:73:4b:79:cb:57:57:ef:7a:4c:a8:4b:
d1:b4:f6:6c:dd:30:b7:fc:15:f7:b3:0c:ac:4c:75:
2b:3a:34:e5:c3:a8:e9:84:ad:fd:bb:23:87:d1:a2:
fc:4b:46:83:f1:3f:31:21:e2:ea:02:bf:df:fe:3f:
d9:b8:29:97:d7:a2:15:8e:d3:7d:82:50:04:03:e5:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:3E:64:20:13:62:92:F0:9C:8D:DB:E9:90:CA:E9:85:79:7B:EC
X509v3 Authority Key Identifier:
keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:92:28:72:50:c3:d1:7e:eb:70:1a:cf:51:34:5b:9f:36:ce:
a9:f2:4c:35:56:75:a7:28:3b:9a:37:23:3d:2d:6f:8e:9a:01:
f9:96:19:f9:f1:9b:19:11:6d:28:14:ef:ff:6e:c4:5b:f7:a0:
76:98:eb:69:b5:75:ab:e7:fe:93:98:9e:b0:4d:95:48:07:60:
61:95:f4:09:dc:19:cf:dc:34:e3:85:cb:10:67:22:a1:78:3f:
16:37:db:eb:68:95:90:0b:36:33:39:e0:26:49:e3:5d:dd:9a:
57:58:b7:7c:66:9a:47:cf:1b:95:38:b1:38:c8:c8:3b:93:7f:
f7:89:a8:7c:2d:e3:89:4a:cb:9d:ec:ea:cf:11:fb:5d:c4:57:
98:7f:73:95:74:3a:87:be:de:6d:fc:9d:85:22:0d:31:9c:3b:
ef:b3:35:25:2b:81:79:4a:0f:8b:86:6e:b4:e9:6d:8d:a3:7f:
8e:27:e2:a4:96:6e:b6:ac:29:bc:a1:4f:89:c5:7c:80:fc:c2:
f8:5e:8d:d3:17:d1:51:12:d4:ec:94:c7:64:89:76:f3:40:25:
10:8d:91:c9:8b:3a:4f:50:3e:9b:d8:fe:b5:0f:ea:89:45:29:
e3:38:37:ce:91:9c:0d:d2:b5:70:82:9d:05:58:c0:de:f7:c8:
c9:19:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:16 2025 by rpki-client