Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: BQvCTSYgu+HPmx8YXF3OCVsElScAczSmr1zw6Dk3igg=
Subject key identifier: D2:95:56:BB:13:79:63:D1:63:06:88:BF:EA:EF:9E:E8:EA:1C:FE:9C
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 01975422C92562742AF9DABC34F3949C786C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 082D
Signing time: Mon 09 Jun 2025 10:00:55 +0000
Manifest this update: Mon 09 Jun 2025 10:00:55 +0000
Manifest next update: Tue 10 Jun 2025 10:00:55 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: oRr6HONJWjywqzCopcqb52PhLOZRdE3/BF0wYC5CkIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:c9:25:62:74:2a:f9:da:bc:34:f3:94:9c:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jun 9 10:00:55 2025 GMT
Not After : Jun 10 10:00:55 2025 GMT
Subject: CN=d29556bb137963d1630688bfeaef9ee8ea1cfe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:56:6a:5f:10:a1:0d:5d:71:a1:8b:79:e4:
d1:92:b4:76:b0:7d:ca:cd:80:10:cb:a7:52:36:0c:
17:b3:a9:46:0c:ca:9d:bb:2f:0c:cb:ce:b6:f8:9e:
95:1d:c0:6e:c8:71:2a:84:ba:10:51:7c:5f:a7:83:
15:58:ea:3c:04:4d:3f:a5:5b:66:74:98:f8:14:84:
7a:6b:29:a6:fd:1c:3d:ac:74:f0:0d:a9:5d:44:31:
57:9b:45:f9:d3:5d:c0:ec:92:80:93:4a:ad:f6:ca:
c4:fb:ae:a9:9c:d7:43:8c:fd:cf:5a:59:6f:3a:37:
c8:be:4c:6d:29:89:e8:bc:dc:0f:66:b1:a5:0a:4b:
d9:4a:9b:35:63:11:43:4a:17:b4:06:51:e8:31:90:
e2:13:12:74:0b:a7:f2:ca:fd:92:f5:b2:17:49:ba:
10:03:e5:d1:dd:4b:66:cd:9a:41:05:63:70:d0:55:
80:1f:3e:be:1e:07:94:f7:91:4c:52:85:91:8e:8f:
60:7b:b1:2a:9a:79:86:dd:17:4c:fa:62:37:05:50:
da:1f:5a:a5:c5:92:34:74:c4:5c:88:8e:70:c8:05:
b6:80:32:75:47:8d:01:f1:9c:ab:25:df:67:71:27:
b6:44:24:9b:34:65:d9:50:c4:db:39:9f:38:d6:02:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:56:BB:13:79:63:D1:63:06:88:BF:EA:EF:9E:E8:EA:1C:FE:9C
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:51:25:6b:af:92:20:14:80:fc:fb:00:21:45:88:45:55:ba:
bf:5b:60:6d:40:7d:3c:2e:a0:da:89:60:15:94:47:95:f1:9a:
7e:a8:25:12:75:17:92:c3:96:7d:37:3a:5b:b9:ce:9b:be:c5:
8e:bc:99:c4:80:c5:80:66:2c:dc:b2:81:29:f9:56:ba:88:64:
47:d9:ee:a7:90:08:43:f7:ac:55:69:45:e6:eb:c6:cb:40:ac:
04:5a:35:c3:1e:f4:f8:68:ac:36:fc:61:7d:f5:04:24:f4:3b:
3f:32:21:6b:83:bb:13:53:c2:33:45:e2:b3:74:68:f3:82:a8:
b2:7f:93:89:ed:27:d6:b1:1c:ee:b9:23:3e:6d:38:52:30:97:
db:a4:76:04:41:9a:ac:8a:b6:7f:32:93:3e:4d:73:7d:3b:8a:
a1:f1:0f:51:65:61:43:f0:4a:a2:41:23:8a:65:d1:fe:76:24:
a6:21:8f:f2:6e:6a:cf:d7:c5:f4:5e:cd:03:ed:db:03:77:86:
b7:cb:12:1f:df:51:05:7f:4b:af:ad:87:3c:8a:76:91:cf:55:
fa:c9:6a:15:4f:44:8c:71:75:de:51:60:ed:87:63:81:c0:73:
ac:95:a8:15:5a:22:7a:d4:db:af:b6:96:8f:91:b3:52:93:36:
fc:0b:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:48:43 2025 by rpki-client