Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: IvNxp1S334oVhATPO/80m2Y2zeHDmnngES+9TpvRBP8=
Subject key identifier: 6F:2B:43:12:E4:9D:00:13:4E:2F:9D:A8:D2:2F:FA:1D:FE:0B:1C:73
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 0198D47314935405E9CC2942BE4D09A85E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 085B
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: nnfe3BJL70oMXLVBhmKw4Qh5K7cUWDkmJ96LciFY2nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:14:93:54:05:e9:cc:29:42:be:4d:09:a8:5e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=6f2b4312e49d00134e2f9da8d22ffa1dfe0b1c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:b7:f8:1a:88:2a:d2:49:b9:9b:27:44:57:
28:15:0d:d3:50:da:47:9d:87:a1:00:7e:72:04:39:
b2:41:4b:c7:23:a1:d5:87:a6:d0:e3:a8:66:8f:df:
76:89:51:26:e0:61:75:5c:c2:cb:b3:14:50:ab:81:
10:e4:45:ef:a8:f9:da:df:6c:0d:bc:d2:ba:d2:d5:
ec:55:24:c8:19:14:c7:71:da:17:4b:25:3c:f0:41:
aa:c5:63:cb:a0:9b:8b:d1:6c:10:42:4b:cf:1e:42:
2a:87:72:c7:53:f1:1c:a1:75:32:c1:da:68:db:32:
88:85:62:10:2f:09:2d:14:85:66:f9:7d:a4:fa:ae:
bd:80:79:2a:90:80:c7:dd:e6:2c:90:11:c9:91:6c:
cc:a3:fb:45:11:58:4f:78:7f:8f:80:52:90:b5:27:
0f:06:49:50:16:45:f2:f6:f2:02:5a:0d:05:f0:d6:
b8:e2:2a:a6:11:e4:a4:ce:b7:63:4d:30:7a:c3:47:
a6:6b:55:ad:37:7d:30:e8:82:4d:b4:0f:ee:54:7c:
b5:50:f3:a7:cb:94:df:ad:03:91:53:8d:e1:40:d2:
0b:8b:58:fe:f1:90:49:8d:65:7a:47:f7:a9:4c:03:
78:15:c3:0b:f7:fd:3f:62:5d:fd:18:e2:8a:8b:20:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2B:43:12:E4:9D:00:13:4E:2F:9D:A8:D2:2F:FA:1D:FE:0B:1C:73
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d9:13:f9:37:64:85:83:a0:7e:7a:e8:f9:ce:16:44:b2:5f:
0e:c4:3f:08:98:e1:15:e1:8a:27:42:14:f3:6e:99:e4:50:b7:
b1:69:e5:ee:cd:71:04:a5:42:4c:2d:8f:c8:f4:e1:e5:67:2a:
b9:73:50:95:88:1b:65:d2:c8:13:ef:eb:5b:ea:1e:8d:5d:41:
fa:d7:26:f1:ac:0f:0d:46:ef:8b:81:78:0c:a7:85:4f:65:c2:
7a:0c:da:67:9b:75:a6:32:a0:94:da:e3:3e:a8:54:da:cb:ee:
a8:51:ff:e5:28:36:0a:e2:dc:dc:0d:fc:a5:a5:9b:09:d6:2a:
08:cc:e9:4b:2d:b6:44:7d:56:6a:6d:3c:4b:bf:93:64:cc:5d:
58:73:e7:d1:69:bf:07:05:86:74:c6:a8:c2:72:5f:7c:62:f6:
10:09:53:de:3d:94:ac:80:03:95:16:ec:5e:9c:ce:cb:e0:e8:
dd:ba:02:39:58:59:4c:3f:0e:d7:75:c4:80:be:bc:04:b5:9f:
42:18:31:c3:7e:87:19:71:95:a0:12:4a:8c:c4:0a:3d:9a:7c:
16:ff:1c:e5:39:fe:03:53:2f:88:9d:94:00:ab:2f:85:3f:c3:
02:e9:20:8d:09:2d:2a:d5:c7:4f:9b:18:88:59:db:90:ac:68:
09:d4:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:03 2025 by rpki-client