Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: 3nr4B/6V1KzOoUzed4RI/CvC6VDNNP/pbiGWTY3PECY=
Subject key identifier: 7B:4C:5E:50:53:97:53:A8:02:F1:00:5A:2D:F6:FD:0D:2C:C6:85:15
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 01975AC95FAC06109288FCBED2D1FAB65014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0C65
Signing time: Tue 10 Jun 2025 17:00:35 +0000
Manifest this update: Tue 10 Jun 2025 17:00:35 +0000
Manifest next update: Wed 11 Jun 2025 17:00:35 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: jDIAxWIy9MPv86vo/SN4yd++JnG94lztd7QTjVJxan4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:5f:ac:06:10:92:88:fc:be:d2:d1:fa:b6:50:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Jun 10 17:00:35 2025 GMT
Not After : Jun 11 17:00:35 2025 GMT
Subject: CN=7b4c5e50539753a802f1005a2df6fd0d2cc68515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:86:8a:9b:cc:fd:c0:e3:3b:f3:e9:39:ec:
78:3d:d4:01:28:4c:9e:0c:9b:94:c3:8d:ed:70:8b:
25:35:46:8c:2e:13:59:96:2e:23:3a:bf:04:b4:61:
e2:5a:32:59:7f:df:51:b9:a2:c5:84:e3:2c:1b:ab:
78:22:1d:c9:89:4a:64:15:1e:6a:7c:35:9d:10:00:
cd:df:b8:03:22:47:0d:55:03:03:c7:7c:a0:02:ec:
e8:3d:fd:a5:dc:4a:02:48:7b:fa:ae:30:d9:79:52:
b7:77:c5:6c:a3:ce:e2:4d:93:27:82:03:da:8c:3b:
47:27:7c:62:4c:b8:9c:1b:5a:a3:b0:19:6c:05:b6:
ec:8c:f1:fb:a3:f0:d0:21:5c:b2:6f:70:d9:5f:03:
13:82:a9:19:a3:bb:ef:8e:a6:94:2a:5b:28:7b:60:
3f:62:f6:b0:2b:ed:3f:e0:5b:04:aa:82:dc:ad:d4:
f4:9f:cd:1f:08:ac:2f:5f:32:ff:2a:ce:f1:22:55:
a1:dc:8c:ac:e6:b4:0d:b4:52:41:a7:ed:f4:bb:b0:
15:2d:af:75:c7:b3:dc:2c:7b:a8:04:19:74:53:8b:
1f:30:48:f1:5c:9b:79:28:be:61:72:29:fc:f4:cd:
33:fa:85:d9:99:14:b3:4d:89:e4:0f:c2:4e:c6:f1:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:5E:50:53:97:53:A8:02:F1:00:5A:2D:F6:FD:0D:2C:C6:85:15
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1e:2e:0b:92:a8:59:50:90:2e:58:69:f6:44:99:69:47:3d:
33:36:29:96:0e:a0:92:b1:68:e4:3e:a4:6c:56:c1:17:f8:3f:
67:6d:b5:12:7f:3b:42:b8:96:1e:59:31:d8:14:7f:ab:5d:63:
49:33:01:18:a2:ba:39:ff:04:48:4f:82:1d:25:25:91:5b:8d:
be:98:2d:b6:f7:af:45:99:dd:c9:6a:7a:ab:1b:32:57:38:d4:
f6:2d:bb:fb:0d:f8:2f:01:ca:42:62:71:bf:b6:b3:5f:d3:16:
9d:9b:2b:84:2d:7d:b2:e5:64:a8:8f:df:e3:9a:32:75:5e:38:
94:4d:d4:91:36:5b:08:b2:f9:94:ff:f0:9a:b6:9e:ea:3f:9c:
af:3b:d9:51:db:b2:1a:ba:ee:70:60:3d:9f:97:db:a1:94:f1:
d2:6d:c8:7a:e6:fc:a4:e5:7b:b4:77:90:48:0c:44:7b:98:ba:
05:df:b8:59:52:42:20:ee:19:c4:5e:9a:0b:28:4f:ed:94:9f:
3f:a1:b3:5b:1a:57:bb:e9:b0:9b:89:63:2e:e5:45:bc:c0:ca:
5a:a5:a8:b0:98:83:ce:16:e8:40:7c:5e:8b:f1:48:3a:94:af:
6d:bb:e3:f6:ba:c9:1c:60:d9:9b:39:08:c3:6d:de:b1:6f:33:
29:62:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:16:47 2025 by rpki-client