Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: R82fsSvvMOayYosPaViTBmc2lKER0nFLmSipTVuXPnI=
Subject key identifier: 05:E9:61:20:12:C4:76:F7:94:E7:8F:48:61:4F:D6:9A:F4:07:E2:75
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 0197B70EB8D7796D36367E32FD673AB9F6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0A2B
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: nSEFxhcS0HgwB6iFCptZb1HBr1Hm4IvQKc0sdo1hjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:d7:79:6d:36:36:7e:32:fd:67:3a:b9:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=05e9612012c476f794e78f48614fd69af407e275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:b9:24:9a:ca:c9:9b:78:58:63:7a:87:f8:
4c:de:ef:16:a5:3f:a4:60:02:e4:a4:24:4b:ca:5d:
a7:9a:a9:cb:d0:7c:06:45:3f:70:8b:c5:05:49:b5:
0d:30:37:44:79:63:40:dd:cd:93:e2:ea:28:1a:9a:
76:b8:52:c5:e2:7a:2b:c2:08:51:18:a6:56:f7:e9:
90:da:8f:70:46:55:2c:e7:4a:0b:91:5c:33:e8:d5:
a7:91:5c:54:a6:53:69:b0:cf:3f:2d:21:c9:d3:23:
3b:d9:f1:48:64:34:f9:47:9c:39:28:ad:ec:51:93:
d4:cf:e2:6c:9d:a3:c6:bc:d5:27:c4:31:bb:5c:56:
2b:a1:44:14:96:0f:59:e9:ae:22:df:4b:9f:3b:68:
60:ce:4e:11:cf:6c:30:78:c6:f4:4c:f3:ec:53:16:
1c:6f:e0:06:26:aa:ff:0f:0e:0e:d1:78:bb:c3:db:
30:58:71:48:6a:ef:b5:ef:44:9b:e4:6a:dd:8e:9c:
ca:38:ba:a1:51:30:44:46:43:f7:6c:e8:9c:ba:0f:
06:a1:2f:d3:cf:0d:a4:c5:e3:3e:40:6e:05:98:a7:
0f:fd:44:83:7b:d5:d6:68:18:4a:8a:af:93:a5:8f:
a0:e5:c9:97:88:13:35:23:78:b3:13:86:84:d0:66:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:61:20:12:C4:76:F7:94:E7:8F:48:61:4F:D6:9A:F4:07:E2:75
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:8a:86:0a:51:8c:fc:8e:2f:88:12:e5:52:72:82:82:41:
c2:3c:23:62:9e:7f:a2:8a:15:a0:93:f3:74:84:ba:94:dd:fb:
ca:f1:2e:02:b4:fa:9a:5f:34:ee:88:3b:2c:79:a2:d8:0e:8b:
27:4d:08:cb:20:e8:4b:85:ad:3a:9d:a3:3b:04:ef:48:be:52:
b2:0a:e6:81:23:ee:c2:ba:31:e0:9c:02:fe:df:d5:50:58:95:
14:06:b3:91:50:5c:81:0b:00:86:39:b6:ed:1f:56:1a:7e:1e:
4c:f3:e3:b6:34:72:d8:1f:96:60:99:c3:34:bc:6e:94:75:71:
4a:59:5d:22:ad:ab:e1:82:7c:13:e9:f9:c4:ee:af:c0:e4:ea:
55:50:43:a2:b3:84:d0:03:e8:4a:03:33:9c:3e:ba:e8:4f:55:
fe:c7:05:7f:7e:d3:4c:18:05:95:96:35:27:8a:7b:f1:c3:4b:
ec:11:11:65:8e:05:58:3a:b8:65:e5:63:94:0d:91:67:01:17:
5a:0a:ae:fb:2e:2b:63:a0:ab:75:72:a5:f4:22:f1:c7:65:01:
99:71:56:12:7d:9c:4f:63:16:93:f7:e0:e1:63:db:84:2e:5a:
24:3f:15:df:58:45:88:98:50:a0:8f:9b:cd:7a:de:39:7c:f3:
06:dc:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:58 2025 by rpki-client