Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: OphBAKNvl4zhvxREdxlcIP8KBgqKm9ZHYsQt91cyrGw=
Subject key identifier: 98:3E:BC:83:3F:82:D3:1E:45:F3:A8:20:14:08:8F:CE:C3:15:96:DD
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 019847782E6962C754A898CB64F5D4616776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 1238
Signing time: Sat 26 Jul 2025 16:01:55 +0000
Manifest this update: Sat 26 Jul 2025 16:01:55 +0000
Manifest next update: Sun 27 Jul 2025 16:01:55 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: ttxbpdwoOhiRhdnbIDoQA8LsXul9S4hbtfoNrCAECOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:2e:69:62:c7:54:a8:98:cb:64:f5:d4:61:67:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Jul 26 16:01:55 2025 GMT
Not After : Jul 27 16:01:55 2025 GMT
Subject: CN=983ebc833f82d31e45f3a82014088fcec31596dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:3e:2c:1d:19:f3:d2:73:4e:52:c5:44:e6:
80:f4:65:f0:1a:2e:e1:b0:a8:fb:80:f9:0f:c2:99:
1b:07:d0:49:c5:cc:f0:98:ac:13:ff:2c:6d:83:b5:
30:bc:72:8e:18:e4:65:b8:6a:41:1f:bb:1e:ee:df:
6b:2f:88:a7:3b:ac:d3:04:ff:9e:2e:b6:88:70:50:
d0:b5:77:ff:e6:4d:a1:1d:b3:11:10:b4:d1:40:a6:
ad:04:b5:1f:cb:a7:ce:b6:a5:cd:d4:aa:f9:82:b8:
45:1f:60:02:1f:ca:09:68:8e:e6:ac:49:07:06:4b:
2e:dd:a3:7a:ef:2f:6f:56:db:3a:23:ed:f8:16:9f:
c1:56:5a:1d:dd:de:e4:d5:20:5c:94:6d:51:37:ce:
34:c3:f3:40:e3:34:5e:a9:6f:65:98:52:ba:d4:6c:
2e:a3:18:1a:f8:d3:d7:65:dc:54:ed:c8:cd:94:f7:
3d:49:98:e7:83:10:4e:34:ff:a1:58:c7:f1:02:e7:
a5:cb:2c:25:3a:be:e4:b3:89:57:2b:d3:f9:d7:18:
ee:ab:96:d2:9f:8b:67:59:55:e8:21:f1:05:4f:de:
0a:be:b8:40:01:da:83:de:03:25:65:4c:0e:10:90:
5b:5b:19:96:14:5c:7a:5d:d7:57:4b:e4:90:f5:b2:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:BC:83:3F:82:D3:1E:45:F3:A8:20:14:08:8F:CE:C3:15:96:DD
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:62:65:9b:be:c2:c0:2a:a6:9c:0c:01:46:a6:cb:b3:c8:60:
91:b0:d2:58:ba:b5:1a:81:43:54:01:09:4f:73:f2:6c:a6:8c:
b3:2c:b6:65:98:c3:4c:4b:c3:e9:fa:13:f5:7a:24:84:7c:83:
4e:7a:1d:6d:c3:08:99:8a:33:db:8c:d1:f2:7f:7c:e7:77:8b:
10:7f:af:2d:20:79:eb:d7:47:16:07:ca:d5:c9:d6:46:6c:6c:
97:3b:a5:10:68:38:6c:8c:1a:34:e6:e8:cf:9e:8a:e9:3d:d3:
a0:20:09:5f:65:fd:da:ca:85:9b:1e:64:2d:e4:73:f0:61:78:
98:7b:a4:80:a3:ad:6d:f9:51:1a:56:76:e7:99:02:4e:b9:e3:
56:e3:8b:71:e7:15:c1:06:5d:1b:26:4b:35:b1:78:3e:d8:e1:
62:77:3f:14:bb:62:d5:88:2f:f1:45:bb:43:92:6f:6d:1c:08:
2c:51:43:ac:04:06:74:99:66:16:e1:a0:93:14:06:8b:eb:36:
ed:52:98:c1:05:c7:49:5a:95:ba:72:b2:d6:cc:50:2c:16:13:
eb:54:92:f8:c4:fd:6d:5f:d9:fb:c8:15:43:b6:e2:64:07:2f:
88:08:89:d3:ea:10:9f:41:2a:3a:e9:69:8b:4c:4e:79:34:cf:
ef:6d:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:59:04 2025 by rpki-client