Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json)
Hash identifier: tDG1nqZHiJUw8oBQhqt3dhlolna/HIdnBGTllbs5S3U=
Subject key identifier: 97:7D:ED:E4:96:59:04:93:E4:87:E9:4A:C3:13:4B:3F:68:A0:EE:4A
Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Certificate serial: 0198D660AFB1DE97E85C65143EEE7A3F7BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
Manifest number: 06B2
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: MdBZ0mn9w6beI7Cr4NM/eavr7FlEYaRQ8Jk5S2gOCw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:af:b1:de:97:e8:5c:65:14:3e:ee:7a:3f:7b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=977dede496590493e487e94ac3134b3f68a0ee4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:ea:68:83:98:29:75:5a:20:9d:7f:41:0a:
f7:7c:eb:45:09:ae:a7:70:d6:f2:ad:c8:4e:94:9a:
52:7a:62:b1:8f:ee:60:6f:67:5d:e2:1e:d8:03:ef:
44:68:7f:18:cb:14:eb:54:d1:92:84:b8:ce:62:be:
b1:f0:b1:fc:07:6d:8a:d7:90:22:32:8f:7d:56:c1:
c9:7a:d0:be:6e:cf:53:03:6a:0c:dd:00:06:ce:9c:
47:41:4b:af:3c:f0:7d:5e:18:6d:38:3d:f6:ce:65:
a9:d0:c4:4d:10:ef:20:24:2a:4a:92:f3:d1:45:11:
b2:2d:06:9f:5c:05:7e:ff:19:e2:4c:19:ec:66:04:
4a:b7:3d:04:b3:a9:8b:2e:3f:88:3d:28:0e:85:48:
6b:99:a0:62:94:fd:b4:4b:56:0c:56:9d:7b:b7:3a:
dd:13:49:45:ae:43:4a:a6:53:6f:b1:23:bb:99:a0:
35:6e:48:5b:8c:cd:e0:ec:b1:af:71:e7:28:6d:65:
06:f7:f2:69:e5:bc:21:ad:f8:47:6b:02:d7:0c:bd:
2c:c3:31:53:13:4d:36:16:d2:2b:1d:6e:91:f1:a0:
c0:d8:81:1e:ec:e9:8d:61:6d:24:d0:f6:bf:5c:05:
3e:0d:a7:c9:24:bd:90:8a:a2:33:3e:3b:39:7e:9d:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:ED:E4:96:59:04:93:E4:87:E9:4A:C3:13:4B:3F:68:A0:EE:4A
X509v3 Authority Key Identifier:
keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:71:de:6a:a8:5b:cf:c6:90:e3:ba:dc:26:b4:98:de:68:cb:
6f:6b:42:7f:6c:b9:ce:c7:eb:04:6a:71:47:d3:07:27:05:d0:
69:5f:02:f6:9f:3f:01:85:e7:09:16:e6:af:67:35:f8:f0:46:
00:7a:94:41:54:c5:a9:a6:e0:eb:36:e9:8a:de:e6:46:63:58:
e0:43:9e:eb:18:92:05:ce:61:20:4e:a4:fe:23:a4:ab:a1:de:
9b:4b:03:e8:71:6c:de:f6:20:73:3a:d9:89:29:58:e7:40:57:
13:e2:b0:2c:18:50:38:cb:53:2b:a6:d3:bb:e8:1b:4e:31:a7:
23:96:5a:c1:31:50:b7:93:3d:fc:be:2a:d6:92:4b:1e:3a:6c:
9c:d7:95:e7:da:ea:c2:f0:ab:fd:08:5f:85:19:9c:17:6f:e9:
a1:05:40:a8:96:ca:d1:8c:9f:fa:41:ae:a5:89:fc:8a:2b:91:
63:cc:8d:8d:b7:4c:81:e9:fe:f9:61:a3:3b:8a:1c:3d:f4:c7:
2d:dc:d4:46:9b:85:41:e1:5b:9d:58:33:21:12:55:f6:db:ac:
a5:49:d1:c7:5d:8c:b8:5c:57:d9:b1:d1:01:1d:98:83:55:3d:
0f:5b:ae:2f:42:cb:49:96:c5:43:45:e4:e5:7d:80:8a:a3:f7:
6b:15:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:54 2025 by rpki-client