Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File: 3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier: 8KGjLitkEV2/OeqsKidxesp/wNZRht5rdxbJpey1moo=
Subject key identifier: 24:88:D0:84:09:AC:DE:C2:BF:21:AC:B1:BD:95:E1:F5:61:DB:99:8F
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer: /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial: 019844E3D6B4A55FDAD65FA34F21A9BCC64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number: 047F
Signing time: Sat 26 Jul 2025 04:00:38 +0000
Manifest this update: Sat 26 Jul 2025 04:00:38 +0000
Manifest next update: Sun 27 Jul 2025 04:00:38 +0000
Files and hashes: 1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: FxaK1qSq/KfYHU9VUaX/ADxd6IqjL0jyBYrwKStpy9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:d6:b4:a5:5f:da:d6:5f:a3:4f:21:a9:bc:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Validity
Not Before: Jul 26 04:00:38 2025 GMT
Not After : Jul 27 04:00:38 2025 GMT
Subject: CN=2488d08409acdec2bf21acb1bd95e1f561db998f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:2b:b3:41:9e:f7:33:36:1c:1e:e9:85:de:
95:c1:a3:6f:a2:0c:27:8b:50:50:fe:0a:84:49:56:
d1:13:56:33:e5:c3:8f:b9:26:85:ed:99:bc:92:a7:
77:6a:ad:c8:34:f9:ce:44:bc:9d:1e:b1:49:a9:61:
40:b7:5b:cb:3c:be:01:66:15:f9:a2:46:d5:f1:45:
f8:86:30:dc:45:0d:3c:22:bc:00:6a:2a:4a:d2:5a:
22:e6:df:e1:a4:cc:b6:29:ed:00:4c:9f:3e:60:aa:
d2:55:12:8e:19:22:c7:45:8d:a0:74:c5:6d:49:0b:
6a:0a:63:a3:06:d2:6e:82:ad:b9:3b:36:07:3e:9e:
b9:0f:68:e9:cc:ea:14:f4:0f:61:59:85:41:0b:04:
78:eb:c9:fa:b3:7c:7b:15:04:22:3e:bf:24:c3:07:
6d:71:a7:b0:63:27:b7:ee:24:0a:67:9e:e2:3e:c6:
fd:ab:e1:5f:92:94:70:f3:bb:82:7d:fe:f9:3a:e8:
4b:95:32:d1:ea:0f:9a:42:4f:4e:57:7e:7b:81:91:
60:a3:58:11:71:72:08:57:15:7e:a0:53:8e:6f:b0:
6d:c6:e2:2d:50:ef:c4:8a:8b:1f:ea:98:f9:00:a3:
d6:b0:bb:74:50:4c:7a:9b:24:08:7a:e2:91:dd:e9:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:D0:84:09:AC:DE:C2:BF:21:AC:B1:BD:95:E1:F5:61:DB:99:8F
X509v3 Authority Key Identifier:
keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:89:94:87:d0:8a:ae:60:fa:0c:d1:11:b9:9f:6f:22:45:
f4:eb:b2:69:9a:24:44:f0:f6:ce:2a:8b:0c:c7:95:fa:0e:34:
81:f4:5d:e8:a5:63:c5:bc:3a:7f:4c:55:c4:32:78:76:91:06:
b0:2d:95:7a:59:6f:e8:b2:9a:10:69:f4:c3:23:54:9f:b9:d2:
55:69:35:6c:1b:55:db:cc:7e:7e:17:1b:5b:99:48:c3:6a:79:
d0:20:74:f2:be:cf:26:76:6b:c3:55:65:d1:cd:3c:bc:c3:82:
08:04:b0:0f:a1:81:11:66:c4:e9:9a:04:78:af:65:d7:67:e8:
81:13:22:25:af:c8:09:63:cb:7c:6a:e1:fa:12:3f:04:0f:18:
af:d4:4a:34:c8:44:8f:41:36:e1:57:e5:11:d6:75:db:7d:d9:
bc:d2:dd:e0:6c:4e:e0:aa:4b:a2:f8:29:39:19:80:31:6f:7f:
a0:9f:85:e1:ac:53:c8:1c:0b:35:f1:4e:b3:93:3c:9b:10:70:
13:63:75:2e:b4:c0:62:6a:07:9d:82:fa:e0:9d:ec:e6:51:85:
58:c5:5f:86:8f:24:6d:8b:91:96:e3:4a:a8:12:8c:1e:92:cf:
83:a4:3a:84:51:7a:53:d4:49:4c:33:44:85:ae:a4:d4:91:3b:
f4:0a:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:47 2025 by rpki-client