Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: 8eYT83IibBpoELsquA6owVdPvNShpoJVVBfYLnW0uQY=
Subject key identifier: 36:87:72:E5:46:D1:AB:D0:77:7C:9E:01:FB:3A:0D:6B:BF:21:1C:84
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 01984A0A1FE9F816C3293DF990640D5E429F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 11F9
Signing time: Sun 27 Jul 2025 04:00:34 +0000
Manifest this update: Sun 27 Jul 2025 04:00:34 +0000
Manifest next update: Mon 28 Jul 2025 04:00:34 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: /DfqvIrUXZO+4nyI3i/2YXgCyM7H7zEZP77HGk32NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:1f:e9:f8:16:c3:29:3d:f9:90:64:0d:5e:42:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Jul 27 04:00:34 2025 GMT
Not After : Jul 28 04:00:34 2025 GMT
Subject: CN=368772e546d1abd0777c9e01fb3a0d6bbf211c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:32:d8:ba:ad:4c:60:1e:9b:05:6b:0e:a1:
70:c8:1e:b1:ae:38:39:c7:ab:fd:b6:27:1f:ee:79:
f4:07:b8:92:ad:56:bf:bd:e5:eb:a6:dc:02:82:69:
30:c5:39:25:3c:e5:5e:72:8e:8d:37:56:cd:aa:6d:
77:f3:be:d0:d2:0d:bb:08:82:19:ad:0c:ca:5b:d9:
5b:bf:a3:cd:d6:10:3d:b2:fe:3a:13:a7:07:0f:c7:
98:d4:9b:de:b3:8d:44:54:a0:12:17:dc:af:6f:6e:
dc:9b:63:ba:a4:4c:78:6c:57:aa:b0:22:59:27:86:
df:2e:67:61:92:a8:6c:12:a3:4e:1a:24:6b:11:88:
84:93:d5:af:47:43:51:9b:2d:17:a5:a1:bf:99:ae:
83:4b:d7:0d:db:f2:bf:63:6e:e6:31:e1:a3:20:ba:
62:79:e9:d1:56:f4:d8:62:75:55:01:3a:90:b8:5e:
5f:f9:61:48:35:57:df:6b:e7:00:1e:16:f3:4c:41:
b8:f2:da:33:cb:1b:dd:73:73:e2:be:c8:39:a7:5b:
f8:32:d5:bb:6b:f2:b6:cf:cc:6f:58:f8:0c:85:3c:
aa:1d:01:19:89:d1:73:47:ff:1b:45:ba:24:47:df:
82:1a:b6:0c:44:2e:c0:04:94:e7:df:37:21:76:08:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:72:E5:46:D1:AB:D0:77:7C:9E:01:FB:3A:0D:6B:BF:21:1C:84
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:fd:32:71:cc:84:b1:b9:84:60:61:38:24:c0:29:0d:d7:
ac:ae:03:8c:46:10:52:1e:83:16:53:fd:ad:48:77:69:ac:6b:
32:5b:1e:f2:eb:77:8e:93:fd:89:34:50:1a:e4:b2:2d:3b:6d:
6d:9a:0a:a9:f5:c2:d7:ba:39:ba:ec:42:1f:b1:c4:78:90:3b:
0a:79:b1:f3:b0:a2:a6:e2:a0:c2:70:0c:1c:68:68:35:54:1f:
fc:50:5d:e1:5c:70:85:44:ad:97:75:a8:89:19:1a:a8:64:2f:
4e:e1:f1:46:02:3d:f3:36:e7:ac:ae:6f:84:78:71:3a:36:28:
3c:a2:1d:18:d1:2a:4e:bf:c2:1e:ca:51:54:03:88:f5:01:c5:
74:21:95:7e:b7:1e:dd:d1:cd:35:58:b9:8b:90:65:db:97:f0:
28:6d:e2:eb:7a:79:7d:2c:08:7e:d7:c8:b2:00:f0:c9:10:ee:
f4:a6:4c:f3:ef:cf:12:f1:1f:e4:dc:35:12:45:b5:97:0c:47:
b1:26:16:e6:cd:29:59:a0:74:db:2c:34:45:ba:d8:6a:a6:83:
d6:99:30:6a:ad:f9:0e:6d:2a:e7:e5:14:3b:11:94:e8:44:25:
e4:46:00:83:a0:6f:7e:07:be:fc:18:59:fc:fd:e9:fa:dd:07:
d7:09:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:24 2025 by rpki-client