Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: E4+g5CGlbaWACugYNBTCnSU+xnyCrii9GSx9+ezTq+s=
Subject key identifier: 45:78:5C:AA:A6:84:30:1D:1A:B4:A1:B9:A7:E6:25:64:72:73:93:AB
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 01984589F03803DA03395833494647DC03D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 0811
Signing time: Sat 26 Jul 2025 07:02:04 +0000
Manifest this update: Sat 26 Jul 2025 07:02:04 +0000
Manifest next update: Sun 27 Jul 2025 07:02:04 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: 1orCoCL4eChV+MMpXU9qiRfaXqSCK8J13hZU11JZMXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:f0:38:03:da:03:39:58:33:49:46:47:dc:03:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Jul 26 07:02:04 2025 GMT
Not After : Jul 27 07:02:04 2025 GMT
Subject: CN=45785caaa684301d1ab4a1b9a7e62564727393ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:af:b8:4d:6d:7b:42:89:c3:13:a3:03:06:
0a:79:f1:22:af:b3:b8:b5:0d:7d:bf:71:78:64:13:
ce:4f:59:42:b8:be:fe:64:29:40:6a:8e:fe:2c:f7:
73:3f:10:bb:51:ff:fa:33:d5:fa:71:b5:e6:06:8d:
3d:f2:47:c0:f9:cd:fb:2b:00:b1:b3:26:4a:ad:29:
06:69:07:d8:d6:21:ea:3d:fb:3d:83:23:b7:3c:03:
97:0b:20:c2:62:72:c9:25:ab:19:bd:cf:50:5c:17:
9c:58:88:ce:ab:ff:26:57:2f:a0:14:bb:75:96:49:
eb:b5:52:f4:3b:43:22:86:de:26:62:8e:08:cb:9e:
a1:e5:7d:62:9d:d9:1f:f6:1f:18:9e:53:df:88:a7:
6c:f5:cd:3c:fc:ca:59:b4:38:b1:ba:ab:65:a7:91:
71:9b:b5:19:71:5c:2e:9f:07:e3:2b:d9:83:25:8f:
8e:1e:e9:f2:9f:61:b3:1d:70:92:dc:e2:ab:30:b5:
7a:9a:e2:f6:cc:48:45:fa:8d:14:6f:f7:88:22:2f:
8c:61:6e:9c:95:ab:fe:26:9e:d6:a2:5e:db:fd:d1:
27:df:88:55:e7:f4:f6:6c:bc:83:fb:1c:6f:3d:bc:
ff:3c:bd:4e:ac:a4:65:96:cf:d6:f1:54:a2:da:90:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:78:5C:AA:A6:84:30:1D:1A:B4:A1:B9:A7:E6:25:64:72:73:93:AB
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:3f:a1:83:b7:28:9f:be:e6:87:21:a7:20:9b:43:6e:0a:
53:7a:c0:9d:ea:dd:20:ec:0c:42:bc:44:46:b3:c3:f5:e3:7a:
6f:0a:41:a5:ae:dd:1f:c5:a4:87:90:cf:90:ad:e4:4f:1a:28:
67:cc:fc:6a:39:24:c7:e1:e5:6e:99:96:97:f2:ae:f0:b3:9f:
e4:14:f6:b8:7d:af:2d:d8:5b:77:97:79:63:7f:9a:93:eb:94:
f1:c1:be:d9:ec:dc:34:a0:91:80:c1:96:01:04:6f:ba:84:20:
1d:b3:72:21:1d:a6:af:60:c5:39:35:d4:d9:de:6e:7e:b2:cc:
ea:67:37:39:72:34:ec:95:7d:9d:c4:b7:90:63:4c:e0:f1:45:
e9:fb:2d:3d:aa:41:eb:ea:d3:fa:86:fc:9d:a2:53:d9:0f:c3:
f5:b4:f3:f6:d4:a6:2c:b2:35:69:3f:f7:e3:2d:36:ca:3e:61:
36:40:f4:1b:1c:f5:3b:06:28:05:3c:29:4a:e4:d7:7b:e5:53:
00:36:1e:0a:a8:1a:45:6a:65:ab:47:8a:6b:ec:05:36:41:29:
2e:85:c0:6e:0d:47:bc:82:be:78:b5:51:b0:9e:b0:2f:0e:12:
a0:9a:24:58:c3:d8:ca:d4:2e:38:b3:16:b8:5b:46:22:89:9f:
cb:92:d3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:16 2025 by rpki-client