Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: gHg3fM5x4twlzPFO9xbK6aUG8gnGg3RRPvOVQqCBtl4=
Subject key identifier: 9B:EF:AE:0B:48:09:2A:94:1A:9D:B6:81:07:A9:67:6A:03:D7:AE:0F
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 0198D4E0E274D2C9E872DEC8775E8DF91CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 0681
Signing time: Sat 23 Aug 2025 03:02:44 +0000
Manifest this update: Sat 23 Aug 2025 03:02:44 +0000
Manifest next update: Sun 24 Aug 2025 03:02:44 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: Ygc0IG5WEw+hbvsV9UZlSQS5BBiSsfvwMMFYZatMsbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e2:74:d2:c9:e8:72:de:c8:77:5e:8d:f9:1c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Aug 23 03:02:44 2025 GMT
Not After : Aug 24 03:02:44 2025 GMT
Subject: CN=9befae0b48092a941a9db68107a9676a03d7ae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:6e:2c:ee:27:ef:5c:04:98:9e:ef:40:b5:
77:74:8e:10:3c:0d:b7:a9:4d:53:99:e7:1e:18:60:
ba:5e:01:6a:d9:81:86:5c:91:7e:da:99:04:d4:5b:
2f:0d:2f:2e:ae:e7:40:e8:a3:e2:b9:7b:fe:9f:4e:
7e:f3:76:78:f4:45:cc:12:33:26:e0:83:76:08:4a:
a8:09:e6:87:c0:07:c1:83:2a:f3:a0:6c:7b:04:2f:
b4:de:24:53:61:aa:80:c7:a2:39:1e:93:00:c2:d0:
ef:ba:8a:b7:c6:df:b9:f4:a1:8c:d3:8d:0a:28:e2:
2e:72:2d:e0:35:73:de:ea:e0:b2:19:43:3a:ae:96:
a7:97:bf:6d:3d:1f:6d:73:3f:bb:34:dc:37:ca:e2:
6f:b7:eb:4c:a5:72:11:33:61:72:3e:a4:65:1b:a2:
ff:8b:30:56:e2:5c:ef:d6:37:84:cf:87:d0:8a:1e:
84:8f:b6:32:4c:d1:da:55:cd:fe:9b:b5:ef:5e:30:
a7:98:21:c7:28:78:0e:43:ea:dd:ce:bc:86:db:2c:
78:1d:f8:c8:67:c6:8d:f4:c2:d5:5f:1b:cb:ef:68:
89:46:7b:a4:01:43:af:f7:4a:81:f1:12:73:54:51:
92:b7:45:de:6d:ef:b6:31:ed:f1:2c:b8:e7:6a:f1:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EF:AE:0B:48:09:2A:94:1A:9D:B6:81:07:A9:67:6A:03:D7:AE:0F
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b0:d5:aa:b9:eb:6d:29:11:d1:b0:66:10:29:e0:cf:61:1c:
6d:92:e7:0a:45:29:f0:53:e4:43:22:a2:de:17:88:91:48:9a:
e8:2c:08:69:d2:78:98:08:6c:61:5b:73:8e:b3:d6:a9:db:4f:
5c:de:58:7d:28:52:d3:2b:fd:f2:42:54:87:67:0a:f0:12:35:
e4:5f:03:44:46:55:0d:a1:24:85:05:44:0b:4e:45:f1:c1:25:
e0:fa:0f:52:2f:b6:fb:c7:d2:77:0a:c4:16:8c:40:17:a9:e8:
51:31:1d:a7:79:f5:22:c5:dd:c7:6d:32:eb:1d:05:be:63:d2:
e6:7d:7e:c2:d9:59:76:9c:5e:38:82:47:79:f9:da:e3:d2:6e:
04:5c:f2:08:91:7d:07:7c:0a:6b:4f:39:bf:32:91:73:14:50:
6d:ac:af:4d:d9:53:89:67:9f:96:a0:d6:7d:d1:88:61:fa:b0:
16:8e:da:10:66:aa:c9:3f:30:5b:5c:04:88:b0:00:dc:12:7c:
c6:11:7e:5e:a2:df:34:b5:57:cc:7d:1a:23:aa:d8:91:df:e7:
78:4d:94:60:01:95:77:71:e3:65:c9:fc:a0:e3:5e:73:90:5a:
09:d3:23:dd:04:80:6a:9b:07:32:48:ea:3b:62:94:20:6e:55:
41:fa:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:41 2025 by rpki-client