Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: bgVqjsM0ADo5wxYnegXqh6PGkr2Werzl51gmo6r8wJg=
Subject key identifier: 14:BE:81:35:55:A5:7A:41:EA:4A:16:C4:F8:09:C2:DA:6C:D5:CD:45
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 0197B89076E4F023186BCE656A079E211987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 22:02:44 +0000
Manifest this update: Sat 28 Jun 2025 22:02:44 +0000
Manifest next update: Sun 29 Jun 2025 22:02:44 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: FZUMr0Xfu4NFAjHxH5ySQ8tTpzYF3j12RRzIF8UwoW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:76:e4:f0:23:18:6b:ce:65:6a:07:9e:21:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Jun 28 22:02:44 2025 GMT
Not After : Jun 29 22:02:44 2025 GMT
Subject: CN=14be813555a57a41ea4a16c4f809c2da6cd5cd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:67:0c:b6:0c:96:a1:db:8b:a8:7b:3d:89:
08:5c:72:9b:49:5a:3a:70:5b:67:8b:a7:ad:7e:a3:
0a:c4:33:3a:c6:43:6e:03:2c:2d:72:97:47:fe:41:
79:d6:78:ec:12:a1:14:c0:d2:7e:ed:fd:08:a1:06:
5b:1b:d8:93:20:38:6f:76:15:4b:81:56:56:d6:d9:
a5:04:ae:3a:f9:6f:21:8f:5e:c3:cc:c1:a3:78:bc:
f1:e4:0e:85:95:88:44:85:d9:cc:94:9a:23:c5:23:
fb:80:db:3a:8f:8c:30:24:8f:58:4f:9b:1e:45:c8:
4e:ff:ac:24:1a:0d:a0:44:1e:63:d8:30:e3:8e:e1:
3e:5c:2e:96:c8:10:48:af:ef:0f:0c:9e:8f:45:9f:
d4:10:f1:75:49:dd:02:4d:6b:a4:72:9e:3c:62:62:
48:e5:6a:de:f3:ed:78:6d:28:c4:b4:8b:33:b4:ca:
bc:e7:a5:df:c6:58:b8:1a:67:96:02:48:38:15:a1:
d0:3d:fb:cc:78:4a:b5:ad:e8:68:88:68:b5:58:0e:
b5:99:22:56:05:2c:62:1d:55:f5:bc:43:9d:2d:d0:
9f:b7:39:52:36:3e:49:e6:d1:92:59:8e:ec:8a:25:
8c:6f:f1:13:c6:bd:1c:d3:3c:27:da:d2:66:9e:71:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:81:35:55:A5:7A:41:EA:4A:16:C4:F8:09:C2:DA:6C:D5:CD:45
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:89:c4:c1:f8:0b:cf:ba:58:ce:e7:82:34:dc:68:2c:8e:6f:
60:97:2a:3d:19:b7:b6:9e:bf:e7:03:c1:c3:94:a2:8c:3d:8a:
a9:f9:ef:cc:5d:c0:68:11:d2:ae:20:d2:2d:a4:1b:5f:c4:92:
93:35:25:29:70:ce:43:e6:fc:f3:48:e7:df:f1:af:4c:1c:df:
8a:27:52:2b:71:8e:e6:24:dd:bb:a0:d2:96:b2:55:ab:93:87:
7a:03:40:6a:10:df:9d:5f:04:5e:fd:39:ff:dc:0c:15:3b:b6:
1d:a9:21:8a:7e:bf:f5:45:6f:a6:09:91:02:01:15:1a:83:49:
56:8f:fa:e2:db:8e:d5:4e:f6:27:c0:f3:b4:18:6d:d7:29:88:
45:64:17:d2:b5:c7:f9:0d:05:64:18:cb:96:ed:1a:39:4c:fb:
68:aa:88:4e:0a:b0:c2:a9:76:7b:67:aa:77:df:bf:a6:c4:c8:
0a:89:39:12:47:27:09:10:ac:9e:20:7d:ea:45:19:01:58:1d:
f9:fb:b0:f6:ed:77:99:e8:bc:d6:38:f4:03:54:20:86:ad:20:
ea:eb:8d:6f:b8:ca:38:71:04:c5:c8:2e:f2:af:f7:62:b9:d1:
bf:90:b8:33:09:c9:a5:c8:8c:e7:70:b8:f4:0e:d3:ee:9e:b1:
5f:80:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:52 2025 by rpki-client