Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
File: s3fTy2Ur05jE2752zbAILp3u1tQ.mft (raw, json)
Hash identifier: fL3YHYlRHZd0jTfHE2mrADorUw3spKMLkH99ujl/QWA=
Subject key identifier: 4A:0A:63:5D:B9:F0:50:C1:77:E7:FC:C7:F5:BE:61:EF:87:24:EA:2F
Authority key identifier: B3:77:D3:CB:65:2B:D3:98:C4:DB:BE:76:CD:B0:08:2E:9D:EE:D6:D4
Certificate issuer: /CN=b377d3cb652bd398c4dbbe76cdb0082e9deed6d4
Certificate serial: 019847AD80028BDE3B3DDC93E0728C56C014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fTy2Ur05jE2752zbAILp3u1tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
Manifest number: 0494
Signing time: Sat 26 Jul 2025 17:00:09 +0000
Manifest this update: Sat 26 Jul 2025 17:00:09 +0000
Manifest next update: Sun 27 Jul 2025 17:00:09 +0000
Files and hashes: 1: s3fTy2Ur05jE2752zbAILp3u1tQ.crl (hash: wWyjj/ycKlZwTHispBxeLhhlXsydOQ1a1DoD0Zog9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fTy2Ur05jE2752zbAILp3u1tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:80:02:8b:de:3b:3d:dc:93:e0:72:8c:56:c0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d3cb652bd398c4dbbe76cdb0082e9deed6d4
Validity
Not Before: Jul 26 17:00:09 2025 GMT
Not After : Jul 27 17:00:09 2025 GMT
Subject: CN=4a0a635db9f050c177e7fcc7f5be61ef8724ea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:fb:83:a8:9a:5d:d6:0c:83:4d:49:26:66:
c8:8c:4a:5e:7e:55:07:99:13:82:d5:b3:ff:a7:ed:
15:70:dd:25:e6:b0:5c:89:6c:e1:f2:27:42:d6:c4:
e6:8d:94:ae:d6:b5:d8:47:80:6c:2c:8a:c4:02:b4:
63:e6:15:ca:a0:36:57:6d:27:db:dd:1a:c0:ce:60:
c9:65:47:a5:f2:45:ac:72:f9:f2:ab:98:a4:3b:73:
e2:18:bd:b8:92:2d:51:06:b6:59:72:50:ef:63:68:
3e:89:bf:17:39:c7:ab:65:ab:c3:20:e2:08:c2:be:
f2:d6:f5:47:ec:47:68:fb:32:6a:e1:43:cf:be:0f:
23:77:8f:63:9f:42:51:49:92:ab:e3:6f:2b:43:a4:
4e:70:59:c6:0f:88:c1:39:0e:4c:1a:ed:32:ab:c2:
ea:1a:33:66:bc:ee:04:29:ce:12:41:3c:3a:65:24:
02:a0:d6:9b:97:fb:e6:7e:2a:32:24:dd:a7:61:2c:
c1:98:45:9b:f8:1c:40:da:0c:8e:f2:36:5d:bb:b3:
af:09:3f:6d:15:e0:da:a5:9e:41:52:78:1c:98:d0:
52:3a:8a:4a:15:fe:dd:cb:6c:60:bc:b9:40:fd:eb:
83:97:d9:a5:77:72:42:ed:40:af:a2:cf:54:8d:5e:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0A:63:5D:B9:F0:50:C1:77:E7:FC:C7:F5:BE:61:EF:87:24:EA:2F
X509v3 Authority Key Identifier:
keyid:B3:77:D3:CB:65:2B:D3:98:C4:DB:BE:76:CD:B0:08:2E:9D:EE:D6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fTy2Ur05jE2752zbAILp3u1tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/57021d-7345-4eab-a710-d73a4573c1b4/1/s3fTy2Ur05jE2752zbAILp3u1tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c7:b3:c4:5f:f3:7d:85:ad:b5:4d:1d:ef:67:04:bf:f4:fa:
e8:50:f2:70:be:88:c9:6e:d3:30:93:0c:56:fe:07:e7:db:9c:
a2:28:fe:7b:cc:09:57:e4:54:94:b1:cc:33:8d:6f:a2:ae:ae:
07:2e:8a:45:bc:2a:f8:66:a9:04:ee:9e:c7:1d:48:93:59:34:
91:97:80:64:af:36:57:54:d5:66:10:4a:03:d2:ef:cc:d4:fe:
15:23:59:5f:9f:e8:5d:a1:ef:26:d7:dc:f7:e3:67:45:89:d8:
12:13:6c:a8:6c:be:3f:3c:4f:ae:54:29:8a:90:f4:f8:df:ad:
78:99:a9:c2:25:81:80:06:a3:f4:f6:ce:86:89:6b:48:61:60:
05:81:b4:d7:5e:cd:49:e9:da:bc:e0:98:19:0c:48:5f:b8:87:
b8:20:45:58:41:03:91:3b:0e:74:fa:5e:f7:3f:4c:82:9d:b5:
91:e6:86:89:8a:c8:82:fb:03:cc:62:87:0d:5d:b7:31:10:d7:
d2:cf:b8:24:b0:21:e6:90:d7:b6:66:a4:e6:bd:32:56:53:89:
eb:ff:e5:1e:4c:67:45:b9:72:b2:55:26:46:bd:5e:5e:c6:dc:
ea:22:16:f4:ee:a9:ce:5f:aa:8f:86:91:56:3e:f7:14:12:bc:
b8:39:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:33 2025 by rpki-client