Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
File: cl3CBR5_PY1hf1UYng7m8xdNkto.mft (raw, json)
Hash identifier: QPSg7/cgZ0LeD9oHcWu2MZgCsPawt00rJGryQ590C4g=
Subject key identifier: B5:4C:E0:94:49:15:99:D9:B4:DE:3A:26:36:5F:B9:2B:77:10:F7:03
Authority key identifier: 72:5D:C2:05:1E:7F:3D:8D:61:7F:55:18:9E:0E:E6:F3:17:4D:92:DA
Certificate issuer: /CN=725dc2051e7f3d8d617f55189e0ee6f3174d92da
Certificate serial: 019849D37B525290F542C8689F17BE2F4F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cl3CBR5_PY1hf1UYng7m8xdNkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
Manifest number: 0326
Signing time: Sun 27 Jul 2025 03:00:52 +0000
Manifest this update: Sun 27 Jul 2025 03:00:52 +0000
Manifest next update: Mon 28 Jul 2025 03:00:52 +0000
Files and hashes: 1: cl3CBR5_PY1hf1UYng7m8xdNkto.crl (hash: zN0SX9AMaV+vmH+VaZaV0G23shr9vbXw+9pMYcRux80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/cl3CBR5_PY1hf1UYng7m8xdNkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:7b:52:52:90:f5:42:c8:68:9f:17:be:2f:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725dc2051e7f3d8d617f55189e0ee6f3174d92da
Validity
Not Before: Jul 27 03:00:52 2025 GMT
Not After : Jul 28 03:00:52 2025 GMT
Subject: CN=b54ce094491599d9b4de3a26365fb92b7710f703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:d5:f0:23:d5:e3:f3:ff:3e:00:df:e2:8e:
35:09:e6:10:33:a5:72:91:55:6e:b0:6d:71:ea:7d:
b1:1e:77:5f:6c:e2:2d:34:70:93:0b:6a:51:9e:cb:
68:54:f0:9b:ee:e2:51:4c:6b:83:af:27:b9:35:06:
c5:f5:32:8e:c7:58:28:66:ad:e5:f4:7f:f1:5e:d1:
57:b6:e5:62:ca:2d:fd:2c:ae:34:62:1a:71:de:24:
09:41:d1:63:f9:88:50:e2:f5:aa:30:d5:d0:3e:1e:
1f:3f:3e:f9:99:49:f6:72:15:c2:be:b2:d4:50:7a:
78:61:d6:2f:ad:c4:dc:fd:12:20:d7:e6:f8:e0:d0:
6d:fc:6c:71:be:97:61:d2:04:96:83:8a:11:63:89:
42:c3:c1:e9:e5:75:fd:c4:aa:bd:bc:d7:67:75:f1:
2e:61:e0:a9:1e:96:1b:5e:c3:1e:f0:10:09:c7:77:
2f:98:57:eb:85:0f:d3:98:b0:c3:87:bb:5c:4f:e0:
a9:ac:1f:4f:7b:a2:3a:70:89:b3:f4:89:e0:ee:e0:
31:95:f4:3b:ec:29:13:43:5c:6b:08:65:39:f2:13:
f1:91:41:2c:9d:cd:cc:e1:64:5a:f5:d7:3a:24:fb:
88:2e:40:70:ea:99:32:24:af:36:77:02:c8:73:34:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:E0:94:49:15:99:D9:B4:DE:3A:26:36:5F:B9:2B:77:10:F7:03
X509v3 Authority Key Identifier:
keyid:72:5D:C2:05:1E:7F:3D:8D:61:7F:55:18:9E:0E:E6:F3:17:4D:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cl3CBR5_PY1hf1UYng7m8xdNkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9a:d7:8d:e1:7e:42:04:0f:3f:cb:53:a3:56:3c:80:4e:e2:
43:f2:8d:7c:88:9d:77:84:9f:af:66:6a:fc:9a:62:1f:d5:6d:
27:2f:ef:17:8f:c8:f3:c7:06:c4:22:62:19:38:5d:d0:2e:dc:
60:bb:4d:19:71:0d:d0:b0:06:35:39:4f:99:21:bb:6b:f8:93:
22:9e:89:54:cc:b1:46:93:b4:ba:23:d1:d4:10:7a:fd:b3:b1:
4d:80:25:e5:c3:32:1e:69:19:db:e8:35:b4:a4:00:c2:e2:bd:
ae:6b:83:e5:13:94:19:1e:df:65:89:83:76:06:58:bf:67:b8:
a5:a2:13:59:e2:ac:bd:a5:bc:06:d4:d6:50:3c:68:4b:99:b5:
0a:01:31:4f:67:08:e0:b5:0e:01:7a:52:2d:ed:23:b3:91:7a:
40:fc:1b:c7:f0:38:6d:ba:f4:4c:a1:4f:50:1b:86:80:12:57:
30:ac:67:74:27:18:66:11:87:3b:e8:99:dc:bb:44:a5:8b:24:
5d:2b:74:11:12:26:dd:6a:66:02:c4:be:f7:1c:bd:01:b2:80:
87:da:d1:2a:5a:c4:44:0d:da:6d:8f:ef:e1:81:f3:99:75:78:
eb:4d:af:a2:b4:ec:fb:ee:a5:ae:39:bc:a4:f1:e4:b3:9b:03:
46:d8:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:18 2025 by rpki-client