Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: jQh/2T3VYg8wu4Xjq2CtOmVoJNFjccbtjbsCvwkZp7M=
Subject key identifier: 24:47:43:6D:AE:F0:A7:42:6D:DC:16:41:C9:86:04:A0:A4:AA:F0:4F
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 019921B10FACA02D46674406FB910A163A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 091C
Signing time: Sun 07 Sep 2025 01:01:15 +0000
Manifest this update: Sun 07 Sep 2025 01:01:15 +0000
Manifest next update: Mon 08 Sep 2025 01:01:15 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: Anxmr5kaC9w3EUm2GobDS0S04Gqot13/PkjSoynjV1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:0f:ac:a0:2d:46:67:44:06:fb:91:0a:16:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Sep 7 01:01:15 2025 GMT
Not After : Sep 8 01:01:15 2025 GMT
Subject: CN=2447436daef0a7426ddc1641c98604a0a4aaf04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:75:38:ec:b9:56:8d:84:b9:31:26:4e:18:
45:65:76:56:4a:6a:d6:80:df:b2:00:be:c4:22:cf:
15:49:df:5d:f8:b3:74:55:c6:bf:e8:a5:e2:8b:9a:
52:5c:bd:2b:40:53:42:15:1f:94:e9:a0:74:b2:ad:
6f:c6:a9:09:c2:9b:42:b9:96:fb:1b:a7:5c:a7:22:
f1:28:1d:6a:d5:4e:eb:bc:45:22:11:28:a7:03:ae:
d0:2a:0b:7c:4a:d2:24:4a:a6:1a:8d:bf:8e:10:63:
77:b9:db:40:13:d4:95:af:09:3b:77:53:b4:c8:23:
c4:9b:10:9f:41:da:cc:5d:5a:e5:0d:d5:64:c4:60:
ab:14:36:fa:e3:af:f7:48:17:7a:57:8d:a4:a4:49:
37:8a:40:49:b3:71:25:98:0d:1c:1b:69:5f:13:36:
25:07:10:73:3d:c2:b0:3d:b8:15:ff:93:9f:74:38:
55:f2:28:40:08:c1:58:52:84:4c:16:59:4b:b2:07:
10:ef:5a:60:27:9f:88:34:da:0f:d0:87:11:e9:5c:
16:fc:bc:8b:f4:1c:ae:e2:59:46:44:3b:85:8a:08:
05:a2:14:63:82:a4:3f:72:30:c8:bb:db:44:ae:5f:
ed:68:76:f8:50:44:53:59:af:44:ff:e0:89:e3:cf:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:43:6D:AE:F0:A7:42:6D:DC:16:41:C9:86:04:A0:A4:AA:F0:4F
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:3b:d3:dd:16:88:58:f1:b5:56:6b:61:c6:84:c6:e1:2f:
b1:c1:bf:4b:3e:b2:5f:a9:ed:22:b5:88:5e:f3:1f:0f:b0:e4:
94:7d:fa:50:5b:28:04:8d:86:52:02:0c:88:72:c7:0a:d2:b5:
55:44:9e:05:db:79:49:a1:d3:ba:b6:37:ea:1a:32:d5:3e:01:
1b:a2:ef:a6:75:b0:bf:9b:c2:c9:99:63:75:b9:ba:4b:b6:d5:
1b:27:e5:6b:8f:57:f0:bc:51:c3:89:d0:4f:6a:79:fe:86:d3:
df:00:2a:2e:81:dc:aa:fa:ba:b7:b0:d1:49:a2:20:77:89:1c:
3d:ff:98:d1:cd:6a:26:f0:23:07:a1:63:d8:b9:c2:3d:5d:cf:
6a:68:e2:a1:4b:e9:e0:d3:b2:c4:7d:1b:2b:1c:c0:25:0d:b0:
11:d7:e4:b7:d2:07:80:fc:a8:70:a9:7b:f2:77:b8:9d:f8:3b:
63:9a:47:9f:96:11:5f:b3:82:50:4b:f3:8a:33:2c:6f:1d:23:
67:1a:92:e7:5b:6a:ca:c8:33:0e:d9:77:a2:dc:71:11:5b:f9:
16:dc:00:f1:30:79:aa:7c:d5:d9:9b:37:65:89:e4:fd:e6:e6:
0e:5f:f9:27:53:9f:ff:4c:27:08:5e:e1:3d:54:72:32:1e:af:
ba:c8:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:29 2025 by rpki-client