Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: g5LDwwJ1ME0VTZZNW4SRay/AWuZoGqcLJBosolnjRgk=
Subject key identifier: F6:67:A7:F1:64:2A:F4:A8:5D:84:CD:CE:3D:04:22:81:E2:AD:8A:92
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 019921B237BFA84167F42343091509B1FC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 0369
Signing time: Sun 07 Sep 2025 01:02:31 +0000
Manifest this update: Sun 07 Sep 2025 01:02:31 +0000
Manifest next update: Mon 08 Sep 2025 01:02:31 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: ONMz66sMBcmQpPqecF2zghRS3nmdr4B6ogYp/zLKStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:37:bf:a8:41:67:f4:23:43:09:15:09:b1:fc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Sep 7 01:02:31 2025 GMT
Not After : Sep 8 01:02:31 2025 GMT
Subject: CN=f667a7f1642af4a85d84cdce3d042281e2ad8a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:b4:e0:47:8b:bd:e5:36:8c:07:78:74:5c:
ff:18:07:a4:c6:c9:cd:14:93:89:cd:1a:c6:d4:bb:
e9:da:b0:66:23:33:ae:21:03:53:17:c0:57:c6:14:
62:48:05:27:24:a9:38:1e:88:1c:d4:29:ea:16:a7:
d8:11:d6:b5:2d:6f:ce:ff:b2:65:12:65:e8:ca:a3:
4b:f3:e4:5b:37:e5:0e:ee:16:c3:ab:4f:bf:fc:7e:
44:08:1b:4c:ac:37:f3:7f:c3:6c:10:09:00:85:66:
88:95:b8:53:b3:ee:cf:02:e1:6a:20:28:c5:15:38:
54:5a:53:d0:21:21:89:8e:0e:b8:e9:52:03:b1:e7:
cc:50:08:8b:00:44:ee:c4:db:de:1e:c2:46:76:71:
39:a3:5a:13:c8:2c:cf:9d:82:f9:f4:57:7c:9a:43:
59:c1:99:fe:fe:cc:4c:c9:4d:71:b6:ce:73:a1:94:
fc:6b:2f:42:c6:59:51:e7:22:17:25:57:5a:0b:3a:
38:ef:9c:c7:1c:27:d5:85:25:0b:8d:67:ed:a0:99:
58:69:4f:f5:45:82:de:18:88:8e:2f:61:e6:0a:45:
a6:22:01:5b:2a:64:9f:b7:e7:6c:18:0d:f5:dc:4a:
e3:54:bc:3d:56:a7:a6:8d:e0:be:25:7f:35:94:d2:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:A7:F1:64:2A:F4:A8:5D:84:CD:CE:3D:04:22:81:E2:AD:8A:92
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b3:84:13:f2:4e:53:47:b0:41:f1:a5:00:b3:4a:d6:d8:47:
8c:1f:67:dc:4f:d5:69:31:df:3a:ff:b3:ae:c4:2d:36:3f:ea:
81:c1:15:f0:e1:85:b4:69:0d:74:31:b3:ae:2a:55:7e:6d:50:
fc:dc:8c:fa:9d:5a:e4:58:15:a2:b3:d2:d7:12:8d:a0:a7:98:
68:ef:91:5c:a2:71:1b:6e:ca:9c:00:87:bf:c3:00:09:53:e4:
17:ec:be:60:bc:a1:94:9c:22:84:74:f1:e1:3a:36:bf:4e:96:
02:2e:4e:b1:6a:b5:47:ed:d6:c3:6e:fd:4f:4d:d2:b0:35:6e:
6d:c3:bd:a2:73:7d:96:d3:ed:14:7a:90:f7:51:fb:f3:bf:44:
18:8d:ae:85:11:85:ce:9b:69:55:be:2d:41:ac:d0:2a:a4:83:
ea:8d:3f:cf:18:81:fe:9c:ad:74:7f:1e:85:98:08:73:cf:7b:
51:ac:f4:65:74:bc:80:c4:13:6b:3d:fb:df:ac:24:2b:a6:60:
be:6e:7c:41:66:e1:f1:46:2e:9c:08:42:6f:05:d8:e5:b8:be:
86:6e:b9:a7:83:57:19:10:97:d6:94:d3:bb:7d:88:65:2c:24:
95:c4:04:8f:57:43:c9:25:5a:c1:d3:27:79:ae:34:c6:c3:9c:
aa:5e:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:03 2025 by rpki-client