Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: R/9gggup/5/sZF/n5e+6ebJhQkFs33fI/9Aq/fSs+As=
Subject key identifier: 41:AC:91:F0:CE:D1:DF:A3:FE:EC:16:52:7A:F8:E2:43:6C:5B:27:B6
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 0197B6A061C211229F9BAF376799CC55468B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: 2VPPoucaaXovgd8iBKlpaAnjPyrzys5sioJIPhT+nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:61:c2:11:22:9f:9b:af:37:67:99:cc:55:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=41ac91f0ced1dfa3feec16527af8e2436c5b27b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:20:79:06:2b:f2:00:0b:e4:d2:18:7c:66:
6f:9a:50:02:b8:99:df:56:2f:36:bd:b1:b4:e0:2f:
e5:6a:13:0e:30:e8:03:58:ea:73:9d:30:08:b4:de:
2f:de:8f:b8:27:5b:22:e7:21:fe:6f:86:0a:cb:08:
c3:c8:26:34:87:f9:f5:6f:bd:a2:f8:9c:68:06:4d:
f0:d0:24:b3:82:be:8d:70:07:3d:29:be:1a:09:a1:
58:5b:14:95:f8:0f:93:42:f5:2c:01:66:76:46:4b:
7f:a5:2a:17:a8:0b:57:ed:7d:47:2c:9b:39:07:fd:
ca:96:ae:94:a3:f7:dc:b1:5b:9f:43:42:49:6b:ab:
8a:a2:ca:71:9b:1d:be:9b:64:92:30:81:bf:c1:01:
23:86:54:25:7c:ac:0d:ac:be:8e:28:8a:d3:55:8f:
d0:87:33:ea:43:56:d0:c1:63:9a:f8:a3:5e:5b:50:
cf:25:f9:ee:8a:4b:05:ec:d9:24:70:c1:2b:a4:21:
e5:8f:94:57:18:f5:1c:2b:df:4d:7e:96:5f:31:6e:
cc:8d:3f:2e:1b:d6:cc:ef:4a:45:59:25:40:87:76:
f8:35:59:fd:a0:db:2f:3b:e0:c8:e2:f8:b3:1b:09:
68:e2:4e:1b:d2:a2:24:8a:b6:79:6a:a5:d5:a2:99:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AC:91:F0:CE:D1:DF:A3:FE:EC:16:52:7A:F8:E2:43:6C:5B:27:B6
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fa:e3:66:e7:ea:ea:ab:74:39:87:7b:c0:fc:a2:99:47:a7:
5e:d4:c5:96:38:5b:b4:c0:4f:0b:e2:ef:22:a5:d8:e3:29:80:
ad:5e:64:a7:b4:a7:60:43:8b:88:7f:cc:b4:e2:d5:e7:e3:5c:
8e:db:22:12:db:fd:bf:ea:76:22:51:3b:9f:8a:e8:61:c0:50:
cd:47:32:27:d2:84:fc:f3:17:ba:3f:87:00:93:fa:ec:03:82:
7b:15:30:7f:07:15:d7:7f:8c:5f:d1:ff:aa:78:e3:a4:25:71:
60:26:3d:f1:e6:82:93:a2:e2:6a:82:37:78:10:59:d9:a9:e3:
57:f6:4c:5d:af:27:de:ac:6c:56:6e:33:70:14:82:2a:42:f0:
30:cc:4f:9b:c6:8d:09:ee:86:1c:8d:cb:23:59:06:17:68:b3:
0c:45:16:8b:08:8a:50:d5:da:15:7c:6e:86:17:64:87:61:b9:
01:1f:fc:77:6b:0c:55:0b:43:cb:2e:14:79:8f:09:50:f9:2c:
29:f5:87:d8:db:0b:2c:6c:32:1f:d3:5a:ca:4d:c1:37:a8:df:
52:35:75:08:b5:ef:c7:13:52:1b:fa:4c:c4:41:3a:77:a3:bc:
5e:c9:33:24:e9:f6:09:5b:47:10:51:c6:87:ac:4b:29:6c:a2:
e7:ed:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:30 2025 by rpki-client