Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
File: db3TijiDJA5GxLGsi7-DF96P-IU.mft (raw, json)
Hash identifier: Qgv7frSD2BByfiRxfgHkiUWIxwezG/ReA6Q31c1qETI=
Subject key identifier: FE:21:D0:57:65:DB:AC:6D:D2:26:6B:1F:9A:5D:97:80:FE:D7:02:00
Authority key identifier: 75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
Certificate issuer: /CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Certificate serial: 0197B7EA229580131D8798B57CAC63B412A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
Manifest number: 12C2
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: db3TijiDJA5GxLGsi7-DF96P-IU.crl (hash: YAl6IoiUOMsg9/FbLB4tuMfXWU7paqRU/04gyJmbi8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:22:95:80:13:1d:87:98:b5:7c:ac:63:b4:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=fe21d05765dbac6dd2266b1f9a5d9780fed70200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:82:d5:ea:12:a1:28:4c:eb:79:1b:59:c5:
e9:2a:e4:8f:a7:5a:27:6b:8e:6b:ce:59:6d:88:39:
4f:60:66:4a:aa:3d:49:2b:c1:18:24:58:e8:1d:92:
b0:c1:4e:67:72:a4:fc:6b:3f:5d:b5:46:5c:18:b0:
84:0f:24:ea:ce:6b:bc:13:78:b1:b9:2d:33:6e:df:
76:41:03:5b:fc:96:91:25:5c:ef:d6:f6:3e:48:8f:
6f:38:43:97:89:b5:c1:99:10:be:01:95:52:bf:88:
48:44:ca:16:83:ef:49:07:cb:d0:a8:1b:cd:fc:95:
2c:b0:06:35:6f:03:ee:2a:fd:08:6e:9a:ea:5c:85:
de:70:f0:99:1f:4b:ac:83:17:ad:98:9c:12:24:8b:
a0:44:c2:51:92:32:42:7e:62:77:2d:ae:f2:4e:2b:
3e:4a:9e:17:94:ab:56:4d:56:ac:75:55:03:00:5f:
09:b5:6c:62:71:c7:db:f1:2d:8b:84:4e:48:f6:34:
41:3c:a8:1c:bc:f8:1e:59:76:35:de:5f:58:44:b4:
5e:05:53:d0:38:14:c0:c7:be:8f:46:07:62:a3:0f:
80:9c:36:12:8c:2a:4f:10:e5:49:2a:e6:c4:87:78:
aa:4a:8c:69:b6:07:a1:4d:52:21:49:04:22:d6:dd:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:D0:57:65:DB:AC:6D:D2:26:6B:1F:9A:5D:97:80:FE:D7:02:00
X509v3 Authority Key Identifier:
keyid:75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9a:e2:43:92:aa:16:ba:cd:11:6e:cd:3d:e2:d8:49:f7:37:
55:08:1e:e0:dd:c2:fb:68:a9:6c:ff:73:cb:e2:29:b1:61:a4:
bf:40:fe:a5:05:56:5b:a3:cb:42:bd:db:0b:f3:17:e7:3a:ee:
6a:7d:e0:76:0d:9d:3c:1d:04:38:35:8d:77:40:4f:f4:5a:23:
0d:6e:49:1b:d2:75:70:e6:e5:e5:13:96:29:e7:ac:1b:0a:85:
ae:63:fb:d9:e9:38:e5:3b:92:b1:98:49:95:6c:ba:8c:06:5a:
53:68:a9:e3:da:2d:2f:d1:fc:ec:b4:cd:20:32:0d:41:e8:13:
44:5b:7b:0c:47:bd:24:74:03:60:ae:b9:a6:ca:21:0c:59:92:
c2:c0:9a:d2:1f:81:19:5c:03:45:10:08:a5:6c:63:69:bc:6b:
16:9f:60:dd:07:fc:ad:92:73:46:4e:06:40:a3:d6:15:f4:2d:
33:f3:25:6a:9f:a6:c5:6b:ec:26:24:6e:a5:c1:50:a1:57:8f:
ab:2f:ee:55:6a:cd:ec:d0:62:f1:aa:b2:e4:91:ab:de:43:c8:
f0:fb:fc:b8:6e:b1:4e:1a:c4:14:0d:38:f8:3d:b0:f0:ef:9b:
f7:20:3f:30:00:92:96:de:c1:1c:c9:5e:14:b6:d3:93:31:df:
cc:89:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:21:54 2025 by rpki-client