Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: BeNq+3q3oJzAy3251fLJH+AlNG1CyM04EYnKrhtUiP4=
Subject key identifier: DC:86:3D:DF:4C:EF:35:13:2F:C3:09:77:99:95:CE:A2:41:49:7B:C5
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 019921B256B863D2532B52FEB0B03A5C4EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 0E12
Signing time: Sun 07 Sep 2025 01:02:39 +0000
Manifest this update: Sun 07 Sep 2025 01:02:39 +0000
Manifest next update: Mon 08 Sep 2025 01:02:39 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: FeYvq0H3mKPVWVEwQg2GNS55tTR//1J6IYWrZOkUsog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:56:b8:63:d2:53:2b:52:fe:b0:b0:3a:5c:4e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Sep 7 01:02:39 2025 GMT
Not After : Sep 8 01:02:39 2025 GMT
Subject: CN=dc863ddf4cef35132fc309779995cea241497bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:07:bf:93:04:c3:a8:92:8e:70:f5:a3:15:
a2:b3:a0:17:1e:36:ef:72:98:54:ca:34:a9:e5:5f:
f4:2e:30:ee:f0:b6:31:de:3c:b9:08:4e:f3:ec:5c:
e6:c5:11:80:d2:3c:be:7a:6b:1a:ea:d4:38:f0:29:
b6:91:25:6a:5f:42:4c:73:db:36:ba:49:5e:82:f5:
91:7e:d0:19:5d:37:22:9e:c1:0f:1c:95:06:6b:5a:
83:c7:90:1a:35:93:6b:71:9b:d4:87:be:3f:9b:0d:
13:60:19:8c:f5:6e:75:80:64:ff:da:4e:b1:6e:8b:
4d:70:c6:92:8b:55:e7:e1:64:88:61:28:2c:15:1f:
97:7c:a2:0f:61:93:ab:ce:a0:c2:11:45:47:cd:30:
37:17:6a:06:9b:e3:44:b1:6f:bd:d2:b3:71:41:57:
a9:ec:6d:09:b6:4c:cd:02:80:7b:10:08:33:55:5c:
55:cc:1d:43:d7:66:fe:31:31:d5:0f:3f:27:0c:66:
0b:4b:f8:02:ac:47:83:a9:98:6b:81:b6:bb:e4:86:
ee:d8:ee:db:3e:78:86:ff:c9:f4:6e:e6:b2:ce:6b:
20:40:56:ae:cb:7e:87:07:41:f4:f3:f0:b2:b6:80:
95:ed:df:05:50:e6:22:5e:8a:e7:b3:ec:ec:21:df:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:3D:DF:4C:EF:35:13:2F:C3:09:77:99:95:CE:A2:41:49:7B:C5
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:73:83:15:d1:7e:49:74:c9:5b:79:29:36:39:14:c2:21:
c6:aa:95:75:c0:a3:8f:16:78:36:cf:fc:0a:98:e0:0d:55:9e:
58:c4:e2:a0:24:9b:66:47:0c:39:88:98:e7:ae:c5:4c:2c:0a:
28:13:d6:5d:c0:43:b1:8e:bd:95:19:b3:31:75:0d:c4:97:fe:
90:63:c4:25:ea:45:ea:c2:6c:c0:c0:a0:ac:3b:b1:b4:57:69:
b2:b2:43:3a:de:80:14:10:95:f6:a1:dc:23:d2:de:10:1f:db:
03:af:e8:71:d7:48:b4:a0:42:cf:b4:2f:e0:92:ab:1d:55:7c:
5a:9c:6b:8b:d2:29:5c:e2:d2:9a:51:9a:e6:61:c4:10:e3:f9:
97:2c:04:81:8f:2e:79:4f:26:c1:5b:8d:6a:f4:ca:79:1c:52:
cf:2f:8d:90:18:00:25:06:2b:7a:49:ed:a5:d3:6a:91:96:77:
b0:f6:ec:ed:8d:bb:44:13:72:1d:09:62:31:ff:e5:1e:12:04:
ae:07:a1:d4:fa:7c:d4:4c:1f:cf:c1:d8:4a:60:b0:d9:16:dd:
01:af:80:c4:4d:1c:cb:e0:47:1e:13:e6:86:d2:b7:71:32:7e:
eb:5f:ca:55:b9:fc:90:67:98:58:53:ed:6b:9a:a8:26:bf:d5:
21:a8:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:28 2025 by rpki-client