Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: BFXIVx+vaMxtiHNGp33zGsqsbrYLzLSB8lusHkndmC0=
Subject key identifier: 24:5B:95:3C:72:C4:FE:AC:94:4C:B6:5A:F8:68:4D:5B:DF:AD:4A:AF
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 01976395E94F1120337499CCA4E1DD9EAAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0835
Signing time: Thu 12 Jun 2025 10:00:58 +0000
Manifest this update: Thu 12 Jun 2025 10:00:58 +0000
Manifest next update: Fri 13 Jun 2025 10:00:58 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: WrQyQ9PA/B5HxaYjbbVn0WyfR05lvyskHwjOBXSzFhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:e9:4f:11:20:33:74:99:cc:a4:e1:dd:9e:aa:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jun 12 10:00:58 2025 GMT
Not After : Jun 13 10:00:58 2025 GMT
Subject: CN=245b953c72c4feac944cb65af8684d5bdfad4aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:10:a0:e6:31:af:fa:55:e2:b6:60:00:fa:
34:d9:06:84:3c:5e:b8:79:17:a7:b6:dd:6b:25:a3:
43:8e:58:ad:44:f2:45:35:db:a0:ca:38:19:d6:dd:
71:93:00:62:4f:72:d5:94:0d:4f:a2:23:b2:51:2b:
e1:40:66:fc:03:87:bd:63:a5:c0:20:bb:b4:62:1d:
3a:20:fb:64:1a:d3:67:d9:4f:57:c3:a0:62:9b:e2:
5d:ea:bd:b8:48:fa:87:14:d9:39:96:d0:30:e9:6a:
fd:c1:cd:df:1d:5c:0e:09:61:9e:f6:8f:f1:08:66:
eb:b8:50:bc:37:84:72:6a:30:26:cf:20:a7:82:87:
50:8e:ee:4c:18:a0:de:4a:91:37:70:36:12:75:fe:
52:4c:07:0e:63:0e:d1:eb:99:f3:71:aa:54:15:32:
89:48:62:ce:64:8d:5d:e2:62:5a:d6:37:29:48:22:
1c:cf:72:fb:e0:68:62:ed:bc:e8:a7:4f:e0:38:e9:
96:75:7e:b1:f5:10:91:4e:49:12:6b:12:7e:c0:62:
c2:29:72:65:72:39:66:26:d4:40:93:dd:bc:9c:6c:
13:6e:d5:94:7c:b4:6a:e0:77:f9:b5:6f:94:c9:e3:
8f:1b:e9:db:d9:75:b6:79:bd:12:a1:88:b4:81:ce:
2a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:95:3C:72:C4:FE:AC:94:4C:B6:5A:F8:68:4D:5B:DF:AD:4A:AF
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:03:0d:e6:32:f5:52:4c:a2:10:70:ab:ba:7f:c7:f0:45:7a:
64:3b:bd:fb:9f:bd:00:15:c5:c0:32:a6:96:bc:89:70:71:30:
b0:b9:0b:0e:9a:58:07:66:a8:a9:d7:34:cb:82:33:e8:ed:bf:
3b:ed:9c:7b:b2:df:0a:00:ab:d0:42:d3:0c:29:78:f8:5b:5d:
75:01:00:39:e6:fb:72:66:50:8c:95:39:14:f6:d2:e5:61:2a:
28:e1:89:ff:00:6a:8e:d0:a3:0c:ed:33:fa:5d:c1:42:95:2d:
51:2f:03:25:62:bd:1d:34:6a:93:2d:59:74:69:24:a5:4e:20:
28:f1:06:35:65:c0:d6:0e:b7:e9:e6:c5:47:d5:bf:90:4d:90:
30:46:6f:9c:b7:d3:34:b0:ee:85:4d:34:56:83:0b:fe:7b:6d:
ce:7e:c7:73:72:a0:cc:e1:30:2a:40:ca:a8:aa:2c:ef:a9:6e:
b2:e6:cd:4c:fd:54:12:aa:90:be:81:6e:cc:5e:59:e1:82:38:
77:62:95:b7:7e:a6:ef:f3:22:e9:3c:b6:11:00:75:63:a3:ea:
63:1d:ce:48:46:13:40:47:90:97:61:20:9b:1e:75:44:4b:d9:
fb:74:80:b8:7b:61:5c:f2:37:a8:cb:0a:bb:00:f2:3d:97:58:
1d:db:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:48:36 2025 by rpki-client