Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
File: s4-3-dr7t_J8ZSqEbTf7nimODho.mft (raw, json)
Hash identifier: IlyPrZP2AWe+kb3bYRG4m1xVQ4YfXJgObYmm28IUNDM=
Subject key identifier: 91:68:D7:C4:EF:53:16:58:E7:E4:2A:4C:D4:A7:4F:2E:6D:29:27:0F
Authority key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
Certificate issuer: /CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Certificate serial: 0197C9F02860BE65926DC9BEECE8647BA443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
Manifest number: 36
Signing time: Wed 02 Jul 2025 07:00:48 +0000
Manifest this update: Wed 02 Jul 2025 07:00:48 +0000
Manifest next update: Thu 03 Jul 2025 07:00:48 +0000
Files and hashes: 1: s4-3-dr7t_J8ZSqEbTf7nimODho.crl (hash: klblL1vX9d/eKnbsaOMJS7UpuHaIC0pK9pdOQxqGa6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:28:60:be:65:92:6d:c9:be:ec:e8:64:7b:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Validity
Not Before: Jul 2 07:00:48 2025 GMT
Not After : Jul 3 07:00:48 2025 GMT
Subject: CN=9168d7c4ef531658e7e42a4cd4a74f2e6d29270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:eb:97:a1:22:48:e0:07:65:b6:66:84:f8:
ee:80:a2:58:2b:0b:04:8d:b2:e3:2b:b0:83:e4:e7:
f9:48:55:c6:94:d6:01:64:07:d7:7c:b7:e5:7f:65:
8b:38:7b:6c:17:09:0c:c4:99:ab:3b:0c:86:a0:58:
1f:a4:02:e8:8f:6b:d5:4c:e9:62:7f:1c:d6:de:5e:
a1:94:21:21:0e:f9:4c:ec:79:27:78:f6:45:0c:65:
67:2e:8a:e5:d3:a6:43:39:8c:65:93:1d:ec:51:23:
76:77:e3:17:39:61:fe:45:1d:88:23:24:1c:9f:ad:
e6:a0:99:65:f4:d7:a5:8d:af:07:61:f7:b6:80:42:
67:90:ab:46:71:7b:8e:d4:91:87:5a:a9:2b:3e:34:
bc:86:06:a3:ee:d4:4c:5a:c7:ed:9b:6d:8a:a3:ee:
01:63:97:48:d7:60:ce:34:a6:8a:51:b6:38:59:78:
0c:9d:1c:f9:b7:bf:c4:a6:0b:7b:72:8b:ba:da:66:
e7:b0:3f:a8:55:38:2c:30:ad:9c:32:a6:87:68:f1:
35:9c:dc:da:16:35:e1:2d:e9:6b:69:8e:97:4e:0a:
66:df:ac:45:e0:da:e4:d7:6e:11:9f:2e:43:f0:3c:
0b:a4:68:34:28:99:b1:1f:72:8d:07:5f:47:cd:cb:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:68:D7:C4:EF:53:16:58:E7:E4:2A:4C:D4:A7:4F:2E:6D:29:27:0F
X509v3 Authority Key Identifier:
keyid:B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9d:60:fd:7c:f7:f7:a6:a9:01:fe:75:48:52:c7:2d:e8:8a:
2b:d1:a5:43:92:5c:27:92:4b:96:39:c1:08:62:97:1f:dd:3a:
ba:51:aa:2e:a2:bd:42:6a:6f:0d:50:25:53:d3:7d:90:c3:9c:
b4:ff:26:40:3b:21:2d:92:5d:da:6d:81:08:51:83:c6:4d:91:
51:9e:00:17:36:13:d7:8e:f0:14:4f:da:04:c7:c1:c2:53:12:
79:78:fe:4d:8c:e9:ce:23:07:d3:6c:fb:4b:df:08:f2:52:09:
e2:1a:54:9a:9c:10:a0:56:f8:c8:e6:e7:f1:19:f0:57:b8:54:
6b:d3:ca:e1:cc:b8:c3:9f:9e:fa:d5:5f:f8:50:b3:2e:dc:c0:
26:1d:8e:9b:7e:59:35:00:35:92:2a:a3:34:51:8a:22:23:13:
43:8b:0e:04:a4:a5:82:f8:03:2d:2d:74:cb:98:a2:9d:2c:dc:
be:22:3b:44:a2:81:5b:fd:4f:7d:0a:2c:ec:89:e9:6c:c0:e6:
19:1d:29:af:aa:ba:90:df:f2:e8:42:78:7c:88:8f:ad:c9:2e:
c6:49:97:b6:c0:40:66:12:25:df:b8:d5:61:5c:92:74:5a:a9:
e5:9f:84:11:8f:22:97:dd:6c:dd:20:0c:9c:f4:74:59:4b:b2:
f1:28:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:43:53 2025 by rpki-client