Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: T5t7Xum1DSMjAu1T85KoirPpp+uhYhqvQj+UlSV7ToY=
Subject key identifier: 08:9E:4B:64:D9:61:08:87:F0:E7:AC:7C:D3:27:36:B9:20:B6:54:AA
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 01984778554D4AFD06D489F7956746EAFDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0CE5
Signing time: Sat 26 Jul 2025 16:02:05 +0000
Manifest this update: Sat 26 Jul 2025 16:02:05 +0000
Manifest next update: Sun 27 Jul 2025 16:02:05 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: p5PF1aAVMZ88BscCdHWiztYCr825073Tc8qTb4uxi0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:55:4d:4a:fd:06:d4:89:f7:95:67:46:ea:fd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Jul 26 16:02:05 2025 GMT
Not After : Jul 27 16:02:05 2025 GMT
Subject: CN=089e4b64d9610887f0e7ac7cd32736b920b654aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:71:14:72:13:a9:0f:97:c7:e1:91:83:dc:
08:16:1b:8b:b8:f2:d4:7b:d7:4c:09:f8:86:0b:5d:
4c:9c:07:12:46:ae:fa:89:94:b9:f1:c5:24:c3:e8:
22:d3:ab:03:26:7f:65:fc:cb:64:7d:01:f4:9c:d6:
0f:d2:39:df:76:9d:4f:12:b7:11:41:db:6b:eb:b1:
7f:e2:96:89:68:2e:a0:b8:63:9c:6b:7c:fc:d9:7d:
bb:a1:cb:54:e7:91:c3:63:c2:3f:dc:8d:ee:6e:10:
04:30:c7:73:6f:8b:15:d8:ea:08:18:25:4b:2e:0c:
36:fb:53:e5:7b:44:d4:84:9b:0a:9e:2e:e9:bc:e3:
7c:55:06:01:f7:d2:4a:02:7e:c6:52:2b:ad:6a:e0:
2e:b4:93:76:47:41:14:ae:b3:0f:a7:57:2a:6e:a5:
9d:dd:95:d7:11:06:b0:0e:db:63:9b:fa:8e:fd:fd:
1a:8c:a6:95:69:00:c1:c8:07:95:e6:b0:b5:ee:53:
3b:3f:45:b7:24:17:42:eb:ef:61:6a:be:db:1f:1b:
7d:7b:db:7d:f6:01:4d:52:56:67:0e:30:df:17:ef:
24:0c:5c:73:42:68:08:95:6f:07:96:8d:79:0f:78:
c7:c9:4b:52:dd:eb:00:ea:7b:70:fc:e2:4e:b0:81:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:4B:64:D9:61:08:87:F0:E7:AC:7C:D3:27:36:B9:20:B6:54:AA
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:5d:08:1b:a2:2f:7e:6d:d4:fb:bb:27:b3:a0:15:0e:66:
1b:a8:98:5b:57:31:9b:74:07:45:6a:69:be:22:ba:be:9d:43:
04:cc:be:6d:c0:5d:f1:42:b9:be:da:da:b8:6e:67:0d:1d:94:
7b:83:b0:6f:45:ce:3f:c9:2d:0f:0b:e0:f4:da:59:a2:1d:8f:
21:5e:bb:59:e8:7b:ca:f7:af:97:a0:24:c1:06:a0:3f:66:d4:
fd:2d:db:58:76:d2:ad:c5:1a:bb:fe:e3:f5:d9:35:9c:8c:12:
3d:86:9e:38:ff:70:61:8e:c2:ed:47:19:78:3d:30:2b:8e:e3:
57:41:ed:fe:ef:9e:02:eb:42:8c:b9:cd:ca:43:5f:a3:a7:3d:
f3:5e:f0:c4:5a:5e:21:0f:84:4d:57:34:84:f7:78:3b:f2:ff:
ce:4d:05:2e:64:4c:cd:c1:87:19:76:d8:28:05:47:be:d1:cc:
b1:00:0a:44:52:bd:e2:91:d1:40:9a:2e:2d:10:aa:3a:93:cd:
1e:15:32:fa:44:89:11:cc:ab:6f:c4:9f:63:90:fb:4d:d7:4d:
99:00:05:0e:e0:6e:17:c0:34:02:83:ce:2d:4b:42:86:b0:4d:
bc:08:0a:9d:45:64:bc:90:61:12:5f:85:63:9d:96:75:07:35:
ed:82:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:25 2025 by rpki-client