Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: 6cRVG3y/nFR5TDH+xz5IS3Fr8mLof1UYtjKPJ1wpXlQ=
Subject key identifier: A0:29:1A:55:39:2A:65:55:90:8F:59:1C:EE:F1:8D:FD:BD:82:2F:26
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 0197B7452DD77A4CAA28F96526842B8EEDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 049C
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: EYPqs22wPQMa2a2nMid5ena7vgClA1E7+vNpzF3EWUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2d:d7:7a:4c:aa:28:f9:65:26:84:2b:8e:ed:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=a0291a55392a6555908f591ceef18dfdbd822f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:52:97:fa:68:be:05:b2:cc:cd:ba:07:98:
59:f6:5e:ce:73:2d:77:2c:a9:f3:ac:30:5a:c2:39:
71:8f:45:ca:02:1b:71:cc:6a:b6:4d:1d:74:66:29:
82:a2:74:ea:60:9b:33:f4:f2:09:fe:78:e5:90:95:
b3:0b:05:01:84:16:41:11:91:9b:03:34:9f:fd:55:
ac:99:8f:f8:7f:06:16:6d:1a:c9:66:cf:5c:2c:b4:
2a:19:93:5c:a5:d3:c0:da:c5:98:e5:d6:ea:f4:e6:
3c:4a:6c:b3:c8:2d:28:f9:bd:85:b8:89:a5:33:38:
1b:e5:60:b3:25:6b:fb:27:20:ee:e6:8c:7f:87:bf:
c4:70:6c:fa:4f:37:39:9e:ff:1d:e9:ef:ed:19:c8:
b0:48:fb:c8:a6:62:f8:8d:e9:42:f5:f3:ed:b9:74:
53:d1:5f:66:8f:4c:32:3d:b0:5a:b4:11:02:b9:ca:
0a:78:2d:ce:1e:a4:7a:16:10:22:94:bf:37:41:5d:
11:f4:bc:15:1c:db:b9:16:96:c9:89:26:0d:20:21:
89:1b:94:10:f9:da:b5:ba:f4:fa:53:4a:b3:9e:fd:
a3:1d:d4:e9:30:2a:e5:3b:ca:8c:50:d4:bc:e6:68:
df:28:51:e8:c7:08:ab:65:08:f1:90:ca:c0:88:ce:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:1A:55:39:2A:65:55:90:8F:59:1C:EE:F1:8D:FD:BD:82:2F:26
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7d:18:00:be:81:43:0a:cf:c1:84:d3:7a:02:d0:db:fb:21:
c5:b6:b2:26:35:be:59:25:66:15:99:be:71:c4:ae:bf:f1:b0:
a5:60:0a:01:17:e3:67:dc:26:10:9f:a7:9c:8f:9b:5f:c5:86:
3c:85:8e:7b:23:db:0e:63:bd:b7:21:bc:5c:a0:ba:b9:d8:be:
01:b8:f0:79:1d:cb:2f:e8:81:19:45:2a:6e:15:31:51:83:43:
43:d8:aa:d8:cf:ef:30:36:f6:59:ed:ce:c5:82:89:ca:d4:39:
2b:48:51:2d:88:3d:0e:d1:26:97:26:96:3c:b3:89:54:a5:ef:
90:15:bc:58:ba:9b:6d:b1:70:3d:dc:3d:7b:52:3f:7e:ae:0a:
e9:81:ab:df:09:0f:f7:22:83:fd:33:cd:97:f9:63:99:fc:6e:
a8:ca:41:1c:34:c2:f2:36:9e:20:fa:a1:a4:63:3b:bd:8b:6c:
15:c9:d5:c1:6a:6e:4f:bd:88:34:e3:a1:f7:f3:05:8a:5b:8d:
3a:ea:9e:06:f3:82:3c:2e:ad:bb:32:a1:9a:af:df:8f:73:f5:
8d:6a:64:4e:94:22:f3:ff:9d:2a:fb:a0:99:2f:6c:81:25:3b:
3f:23:1b:ed:48:72:f8:09:24:2f:c8:ba:28:f0:82:27:1d:f4:
bd:5f:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:59 2025 by rpki-client