Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: rutKq3Xmjj5VQnie0geYyGUuSiF05CPTCDGKU8EP2SU=
Subject key identifier: 89:22:2D:41:49:F8:D8:2C:66:B7:38:69:FE:4B:72:CC:BD:30:92:10
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 0198D4045109AB4C3E81AE2480F1339D66F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 059A
Signing time: Fri 22 Aug 2025 23:01:49 +0000
Manifest this update: Fri 22 Aug 2025 23:01:49 +0000
Manifest next update: Sat 23 Aug 2025 23:01:49 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: +21scrUOxCJoOjsGql+J0wBcV4CKAaMw/i8PBSPUNwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:51:09:ab:4c:3e:81:ae:24:80:f1:33:9d:66:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Aug 22 23:01:49 2025 GMT
Not After : Aug 23 23:01:49 2025 GMT
Subject: CN=89222d4149f8d82c66b73869fe4b72ccbd309210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:01:a4:c4:fc:63:6d:75:18:3b:6a:38:a1:
f6:dd:70:6e:48:c4:c2:62:fc:6a:c3:47:26:40:95:
5f:1b:8b:c7:1d:50:ef:4e:26:4a:9e:32:e0:b9:65:
32:c1:be:7b:7c:07:bc:ff:5f:a6:12:d1:85:17:b5:
15:a6:a6:16:ff:22:00:6c:ae:ec:c6:9d:cc:09:3d:
ea:3c:23:27:4a:16:19:c4:ee:b0:e6:40:20:17:4c:
fb:8c:32:31:29:31:00:4a:d4:9e:45:0f:ba:58:e8:
9a:6a:32:e1:e2:3d:32:7c:b2:cc:f1:ae:9e:c0:77:
3c:d6:e9:de:93:fe:59:e7:95:73:e2:c9:17:bf:ab:
1b:3d:27:31:ca:b7:9b:6f:c9:0d:a2:c1:20:74:ab:
c9:d9:0a:d4:80:58:79:0a:a5:7c:04:e4:f1:36:7c:
1e:f6:f7:a6:72:4c:70:81:cb:b2:55:55:83:41:40:
bc:b5:6c:a5:d2:71:ad:80:0d:a0:23:29:20:bc:9f:
2a:9b:f3:a9:f0:bb:1d:17:0e:3f:d9:c5:68:00:eb:
f1:dc:08:d7:19:23:a1:2b:f5:44:4d:f1:f9:96:3e:
58:ac:6b:33:8c:9c:ea:67:e6:d7:f6:84:05:b9:47:
44:4f:05:d9:57:98:70:fd:ed:1d:d6:b6:b3:f3:91:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:2D:41:49:F8:D8:2C:66:B7:38:69:FE:4B:72:CC:BD:30:92:10
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:55:85:5b:61:b2:1e:ae:aa:0f:6e:03:89:4c:26:97:cd:63:
b1:ab:38:d3:b8:0e:c8:1c:de:f7:93:98:52:f6:e2:c5:3a:b9:
a0:4f:74:52:3c:0f:cb:61:af:c4:a5:65:3a:72:5b:c5:52:a5:
e8:f8:14:ec:cc:92:93:4c:e3:c2:ed:4f:f1:1b:9b:0c:2d:26:
64:cf:fb:3a:e1:07:6f:22:1f:52:2a:59:30:dc:ce:42:01:c3:
71:c2:e9:1d:f4:8b:e5:ec:0a:43:51:5c:5a:c5:a6:79:63:67:
24:0c:68:7b:a0:25:dc:80:31:01:10:5b:9d:f4:14:b7:5d:b2:
3f:da:cf:0a:87:10:ec:e5:45:27:6a:4e:76:c9:91:1a:69:d4:
0e:16:08:9e:a0:14:76:c7:a6:73:fb:01:10:ff:d0:1f:e8:2b:
49:a1:7e:ad:7e:03:fe:40:d4:1d:bc:62:54:a6:63:c2:d0:d6:
36:53:a3:94:9a:46:7c:ab:10:58:1f:47:fc:38:1b:08:b9:d4:
90:60:28:05:70:bf:d8:17:f1:8e:c1:c9:05:aa:6c:46:da:96:
a9:ac:a2:7a:83:6b:65:be:56:87:69:a7:20:3e:b3:0d:40:33:
36:05:b2:25:8d:b7:15:8c:06:a6:94:83:40:bd:0e:fc:83:68:
99:c0:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:30 2025 by rpki-client