Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
File: x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft (raw, json)
Hash identifier: dYYpjOus8kriE8LbP48mq4RIs9sbZzVGkazF2Pj3xUo=
Subject key identifier: 6D:9D:48:25:AA:52:83:28:EE:54:FB:CD:91:F6:E8:9A:84:9C:54:FA
Authority key identifier: C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9
Certificate issuer: /CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
Certificate serial: 01984965A329D077244E673188984F6C80C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
Manifest number: B5
Signing time: Sun 27 Jul 2025 01:00:54 +0000
Manifest this update: Sun 27 Jul 2025 01:00:54 +0000
Manifest next update: Mon 28 Jul 2025 01:00:54 +0000
Files and hashes: 1: x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl (hash: 6B0z4VRvE7LulyphHAgyFBbtw2MNyijVXDqcW+PeqPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a3:29:d0:77:24:4e:67:31:88:98:4f:6c:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
Validity
Not Before: Jul 27 01:00:54 2025 GMT
Not After : Jul 28 01:00:54 2025 GMT
Subject: CN=6d9d4825aa528328ee54fbcd91f6e89a849c54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:6e:56:7d:d3:04:d3:8b:b5:27:49:79:eb:
86:87:b1:d4:ed:3f:43:7c:f7:d1:ff:18:d9:79:f7:
cc:e1:b6:69:0e:1a:77:68:48:1e:4f:8c:40:c8:a5:
dc:5f:f4:f2:eb:bf:38:76:34:70:89:64:ef:be:8a:
24:ea:a9:71:b4:3b:e8:2d:58:d8:db:d6:18:3f:b1:
4e:ca:9b:08:9c:3d:14:fd:64:f7:b8:16:81:db:1d:
48:b8:8b:73:22:2b:91:13:c3:1f:bd:45:d7:9a:d2:
7a:43:eb:13:f6:66:22:9d:ef:26:ae:ee:be:a5:de:
ca:68:74:e9:dd:80:a0:0f:02:f7:f8:13:41:83:f3:
95:82:9e:94:b5:f5:da:0a:c6:5d:0b:32:8e:26:f4:
ad:0d:97:21:e7:2b:7a:75:12:3d:12:95:c1:0b:0b:
b5:dc:fb:d1:1c:0c:1a:03:2b:e1:89:40:02:f3:02:
8e:e2:5b:f1:b7:14:ad:14:0e:92:6d:da:99:50:1f:
ff:24:3c:d4:59:8b:4c:95:a4:d2:19:f7:8b:ca:27:
44:5c:21:82:02:d3:1e:98:7f:7d:56:a6:5b:e8:09:
a1:db:d5:6b:93:ac:1f:91:8f:0a:a9:3c:0c:e5:30:
d8:99:95:6e:3d:81:d8:1f:49:01:14:5b:e0:d0:97:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9D:48:25:AA:52:83:28:EE:54:FB:CD:91:F6:E8:9A:84:9C:54:FA
X509v3 Authority Key Identifier:
keyid:C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:88:8c:52:cd:e9:c7:62:09:62:8c:c8:00:e1:f6:d5:c2:9d:
d2:6b:24:9a:fa:94:3e:4d:27:dd:ab:2d:34:21:ba:6e:79:2b:
c7:ab:98:d0:b3:c4:2c:db:42:3e:25:32:3d:47:1b:dc:8f:50:
26:82:a5:3d:eb:cd:de:ab:a6:8a:c2:1b:75:90:5c:21:7e:44:
ef:62:e6:53:64:8f:d8:8d:e9:36:72:ce:17:6e:b1:d0:0c:f1:
30:af:f2:16:84:83:62:6f:df:e3:ea:ec:56:07:a5:d1:1d:f1:
54:3e:90:bc:16:b1:5d:de:05:11:e9:0e:e3:6f:0d:a6:c3:fa:
83:00:83:d7:a4:f8:9b:fd:77:61:90:ae:99:e1:2c:db:c7:0d:
7f:39:be:2a:34:17:5d:8d:30:1f:bf:51:46:f4:92:be:50:09:
79:98:c7:77:54:6d:48:b2:95:8d:1e:85:66:f8:e7:74:8b:3f:
fa:d5:33:d6:8e:1b:37:08:d3:99:c8:65:d7:8c:b0:59:e0:be:
0e:7e:8c:21:f3:fb:21:50:5b:41:fd:42:3a:0d:b5:a9:96:ac:
8f:23:c8:a3:55:94:8d:ce:ab:d2:bb:2b:0e:c3:71:5d:f8:ea:
00:aa:3b:15:6e:7a:d7:3b:6b:a5:47:22:a2:b7:fe:9e:12:c4:
93:f0:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:33:42 2025 by rpki-client