Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File: 3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier: MqlLnwaUlXsZmAJaekCqBwHthTuTagbhVp37Hvb2feA=
Subject key identifier: D4:38:C8:E6:98:F9:45:A2:D5:F1:CF:1A:76:2B:83:7A:3E:65:AE:73
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer: /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial: 019847E4D47CF6BC5C26694E47645767723C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 18:00:35 +0000
Manifest this update: Sat 26 Jul 2025 18:00:35 +0000
Manifest next update: Sun 27 Jul 2025 18:00:35 +0000
Files and hashes: 1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: ckRBUN4KyZCS2zqzX4DJE3uuamLWl6TiVmfK0s3tLrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:d4:7c:f6:bc:5c:26:69:4e:47:64:57:67:72:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Validity
Not Before: Jul 26 18:00:35 2025 GMT
Not After : Jul 27 18:00:35 2025 GMT
Subject: CN=d438c8e698f945a2d5f1cf1a762b837a3e65ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7e:82:fe:f5:8e:c2:d5:5c:b3:49:62:e8:bc:
02:13:db:46:48:8c:ba:75:53:31:4c:b6:5f:a6:19:
6a:07:95:70:77:1e:ce:f7:16:1e:17:52:96:db:5d:
b8:9f:31:db:f0:3f:86:e5:a9:cb:3b:96:62:bc:ed:
f9:e3:90:b0:4c:70:39:e6:42:e7:fc:1e:5e:1d:2a:
c4:0d:f2:66:ec:04:3e:81:58:41:10:82:f4:70:0e:
35:66:07:00:d3:fa:ea:e6:2d:fc:03:15:34:6f:76:
ea:aa:94:9a:d1:92:1d:63:60:89:ad:0f:b3:d6:ef:
bf:32:55:7b:d9:ab:69:82:ab:b3:32:9b:dc:0a:0c:
6d:83:04:ec:34:9a:7a:6e:d4:85:46:bb:5f:ac:ae:
21:56:c3:65:f9:a4:da:0d:51:75:e3:a6:6d:e8:42:
9f:ad:ec:fe:41:80:66:40:c4:ee:98:96:5d:c1:88:
0d:dc:ac:9a:bb:4d:bd:82:51:1e:e0:32:56:0e:d2:
2a:20:fc:ca:e8:69:52:76:ad:3f:f4:79:24:34:87:
4b:83:b1:4c:69:06:4b:9e:40:cd:84:fb:16:e2:ef:
91:65:af:e2:41:60:4c:38:be:78:1b:5f:2e:30:2e:
e7:28:17:1d:0a:ed:e2:3f:62:c0:91:37:70:e4:d0:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:C8:E6:98:F9:45:A2:D5:F1:CF:1A:76:2B:83:7A:3E:65:AE:73
X509v3 Authority Key Identifier:
keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a6:1e:6c:90:c6:b8:aa:0a:ac:10:bb:ca:3a:e4:28:2a:9e:
db:b2:11:5f:9d:8b:cc:0e:73:c0:0d:d6:60:39:25:61:8e:91:
c4:0a:b2:58:6d:74:bc:d4:e7:31:cc:7e:bc:d1:4a:61:31:fe:
c8:84:df:6b:0c:a4:8b:c2:2e:de:e8:70:c1:95:cf:be:9e:cc:
2f:d5:e5:9b:d3:bd:c8:fe:41:ee:75:60:b4:b9:83:63:46:37:
25:27:5f:fc:67:0b:20:cc:fc:de:db:42:5e:c2:c5:48:bc:79:
4d:5d:da:b4:24:27:4b:8b:4b:c3:8c:77:62:a0:a0:88:96:05:
65:3e:db:ac:83:74:81:6c:65:c2:b9:11:c2:37:5a:07:b1:39:
67:29:0e:52:95:3c:97:94:06:ae:c5:14:39:21:77:9e:66:ec:
7c:19:a5:1a:d9:74:b4:62:d2:3d:24:5c:27:0e:e6:8a:61:ec:
a7:6d:06:be:10:df:69:d5:4b:59:e2:a9:18:b6:13:61:26:7b:
c7:ab:ee:1d:9d:07:f0:14:7f:cf:7c:bb:63:aa:2c:b9:54:f0:
12:a2:58:5b:ce:03:ea:64:48:44:d6:6f:b8:5b:36:8b:5b:a0:
3e:95:c9:c6:2c:b0:da:3f:6d:c7:51:57:f8:67:9e:02:54:1d:
18:dc:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:50:44 2025 by rpki-client