Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: wMyO1Ls04elvnbZx6IP1GNQurC8cvPwaLJIxC+QqVJ8=
Subject key identifier: D2:38:D1:BE:73:48:2D:FD:B4:6E:94:51:6E:A4:E6:35:CA:80:B4:3C
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 0198D8BD56EA1792621EAF6D74D04443E492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0AC1
Signing time: Sat 23 Aug 2025 21:02:23 +0000
Manifest this update: Sat 23 Aug 2025 21:02:23 +0000
Manifest next update: Sun 24 Aug 2025 21:02:23 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: R9nZ7q72Ff4Yy02JIc6P8RtIj1F1Xc6wxXCevlHZjaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:56:ea:17:92:62:1e:af:6d:74:d0:44:43:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Aug 23 21:02:23 2025 GMT
Not After : Aug 24 21:02:23 2025 GMT
Subject: CN=d238d1be73482dfdb46e94516ea4e635ca80b43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:87:22:f3:b5:07:00:43:53:86:57:88:90:
29:e6:71:df:7f:29:ad:80:db:f7:94:4b:4e:3f:6e:
ae:34:4f:01:75:d2:dc:09:ed:61:68:ad:75:59:49:
cc:4f:7d:5b:f2:2c:c4:f4:21:eb:26:44:4f:d0:e5:
4a:79:af:d2:b8:39:a2:32:36:ab:11:e1:8a:83:b0:
3a:6b:b5:8a:63:5a:0b:26:6c:63:5a:4a:59:5c:c5:
aa:70:90:92:9e:9f:6d:08:17:00:08:62:8d:37:32:
be:7c:2d:fb:df:ef:27:ed:9c:54:d3:e0:eb:21:b8:
19:16:e3:c9:a0:7b:5d:c0:15:07:7c:ea:16:8e:ae:
b6:75:52:30:16:57:55:23:d6:b1:c5:2a:7b:b9:27:
02:f3:f2:9b:0c:9d:3d:ee:c8:d7:f3:f2:8e:bf:98:
ae:ea:55:86:56:8d:6b:04:95:da:bf:ea:ca:30:a0:
fc:ce:ac:d5:a8:7d:90:11:37:a6:83:48:2a:c7:92:
58:c7:b8:00:4e:7e:8f:34:db:8b:20:c6:8d:4e:90:
dc:7e:23:60:b2:37:16:eb:6c:d8:dd:04:2a:43:81:
87:cc:49:0d:aa:20:7c:3d:e9:59:9c:c1:46:1f:70:
c7:2d:49:fc:31:af:c8:b5:16:cc:bf:ca:fa:01:82:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:38:D1:BE:73:48:2D:FD:B4:6E:94:51:6E:A4:E6:35:CA:80:B4:3C
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:62:dc:7a:51:48:d0:f6:6e:84:41:fd:0d:05:0e:dd:47:5a:
b1:1a:dd:b6:50:fa:a7:45:26:56:23:1d:ac:90:3c:d6:06:0f:
60:52:84:7b:f7:95:8b:2a:d9:6b:27:37:bd:90:73:77:43:a5:
bf:d7:a9:64:ca:bf:2f:01:7a:96:04:5c:8d:85:33:a4:b9:7f:
5d:24:03:b1:20:6b:fe:57:fd:28:04:c0:66:b1:ff:bb:b2:68:
b2:cd:5d:c2:ac:0c:95:25:75:7f:b1:b3:11:2e:d2:f7:43:52:
b3:0f:6a:5b:48:89:c3:c0:cd:96:5a:17:64:8e:8c:ff:2a:3b:
70:a3:27:ad:60:8c:3d:54:35:2f:98:f6:d2:79:87:b9:df:3a:
17:f4:ed:15:bd:9a:36:cb:00:44:0e:3b:da:f9:e3:5a:17:ac:
c7:75:23:87:ff:c1:ce:09:01:72:bd:d1:4e:32:cd:d9:40:9a:
93:8b:9f:c1:a4:f4:54:92:fe:23:f1:1d:be:87:d6:64:38:76:
2a:a6:78:9b:ed:a3:b1:e0:9e:63:b2:88:de:30:9d:69:3a:87:
90:3c:12:fa:42:cf:65:64:10:d6:32:e1:22:af:16:ef:51:39:
c0:a4:6d:b7:c1:7b:35:15:43:dc:71:7e:be:2b:8f:0b:98:08:
7e:ff:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:41:06 2025 by rpki-client