Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
File: cs3rVmQuM1iXcef9pxu3HgF_nZY.mft (raw, json)
Hash identifier: 59QjAPYVhN9fj0EKwa9i8JUa7+OBI1qH4ej27ch/nTc=
Subject key identifier: B6:FB:9F:03:52:BE:F2:26:4F:0C:E3:44:AE:57:E7:28:03:3A:F7:6C
Authority key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
Certificate issuer: /CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Certificate serial: 0198D7733D91C63625F732A68064B442B38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
Manifest number: 0B68
Signing time: Sat 23 Aug 2025 15:01:50 +0000
Manifest this update: Sat 23 Aug 2025 15:01:50 +0000
Manifest next update: Sun 24 Aug 2025 15:01:50 +0000
Files and hashes: 1: cs3rVmQuM1iXcef9pxu3HgF_nZY.crl (hash: CYnkBnausCoUU/pw4XxWd+H8tHAj8JIpjreCP+0XcME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:3d:91:c6:36:25:f7:32:a6:80:64:b4:42:b3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Validity
Not Before: Aug 23 15:01:50 2025 GMT
Not After : Aug 24 15:01:50 2025 GMT
Subject: CN=b6fb9f0352bef2264f0ce344ae57e728033af76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:5b:ec:e6:20:f6:67:8f:0b:4e:0b:19:17:
dd:1c:dc:3e:27:f9:7c:88:36:3c:41:3c:88:4c:5f:
16:4c:f8:5a:30:5c:94:3a:b3:f8:4f:6c:ef:fc:43:
84:c2:8e:3e:49:23:4e:52:25:97:96:3e:78:f0:f8:
f1:3e:f8:c1:c3:97:32:5d:01:0b:8f:bf:77:c6:e0:
14:32:4e:e9:e3:ed:5c:16:40:17:a7:2a:c1:97:b8:
03:31:0e:a7:e1:34:29:0f:0e:57:06:27:7e:50:45:
78:a7:38:e5:14:84:4e:3e:3d:7e:9d:9e:63:c4:0a:
05:6a:c1:54:9d:51:38:29:29:82:b0:5e:8e:31:e0:
78:9a:39:8c:cc:cf:3f:ce:35:71:e7:67:4e:4a:42:
0f:0c:1e:dd:2c:c1:e8:b4:9e:a5:1f:0b:22:3e:03:
d1:e2:c2:ae:f1:10:3c:a6:8f:e2:3b:a9:5b:09:8a:
3c:71:51:4a:ff:0f:bf:5b:02:02:5e:38:34:10:79:
3c:15:01:ee:b8:e1:c9:9e:ab:c5:97:f1:47:53:39:
6b:34:95:e9:81:1c:5a:b1:25:87:c8:e6:7b:07:f9:
91:e3:cb:a5:71:8e:45:f0:0d:ce:b1:44:c7:14:50:
b5:fe:4b:57:45:5b:71:7e:9b:b7:4b:5a:ab:99:38:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:9F:03:52:BE:F2:26:4F:0C:E3:44:AE:57:E7:28:03:3A:F7:6C
X509v3 Authority Key Identifier:
keyid:72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:34:bd:5f:76:1b:f8:6c:e5:0e:9b:53:12:2c:6e:68:69:c9:
1a:b6:7a:47:d6:17:58:9a:b9:6d:a3:2c:41:f4:de:bd:a5:1b:
f3:52:60:bb:9c:63:79:e5:83:da:d1:ad:97:46:4a:dd:d6:76:
1a:e6:a4:53:cb:f3:e7:be:a4:08:d0:66:b6:66:7f:05:c0:e4:
fd:e0:de:95:61:dd:a9:eb:84:44:16:c3:7d:94:ab:2c:80:89:
24:5c:59:d3:d4:c1:6a:95:3e:50:aa:ef:52:2d:8e:76:8d:fa:
8a:71:fd:f1:ec:ed:92:e4:5b:e3:6e:35:9f:44:b2:d6:d6:4e:
7b:76:00:7f:b6:1d:90:1c:79:28:45:b5:c2:19:ab:a9:22:fc:
ee:23:3c:2a:df:f5:74:11:e6:bd:2f:10:b9:49:8c:ab:9a:a7:
cd:65:3f:ac:84:ae:c3:db:db:db:9c:ac:6d:8a:a7:08:2d:1d:
14:a3:36:a9:86:3a:99:2d:67:93:5c:32:21:21:55:7c:24:1e:
a2:58:02:a0:d5:07:41:d8:d9:e1:4b:fb:fd:33:54:a2:92:80:
78:5d:31:ad:93:5f:da:3f:4c:f0:cc:c9:c3:3d:a6:b9:ae:df:
4f:c4:f9:0b:c9:36:32:0e:45:ae:ad:12:f2:27:5b:d7:6d:f5:
09:4f:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:00:49 2025 by rpki-client