Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: 0OPZ1rqjn6A1NhDI1UsNTunPFUlbfuRyP6fKf7tb5U4=
Subject key identifier: A2:60:FD:B2:96:C1:08:43:07:6A:90:13:A4:D9:5A:F3:AB:BC:EE:4D
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 0199228C953F91892C5CBFAA503CD9B910F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0D51
Signing time: Sun 07 Sep 2025 05:01:02 +0000
Manifest this update: Sun 07 Sep 2025 05:01:02 +0000
Manifest next update: Mon 08 Sep 2025 05:01:02 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: G9E8Bc7Whllk89sHvMugv8fK2Z3dDLwQmcz58cPgUEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:95:3f:91:89:2c:5c:bf:aa:50:3c:d9:b9:10:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Sep 7 05:01:02 2025 GMT
Not After : Sep 8 05:01:02 2025 GMT
Subject: CN=a260fdb296c10843076a9013a4d95af3abbcee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:97:37:dc:6c:92:55:16:76:c8:63:9c:79:
64:3b:4b:55:f3:6b:d4:60:51:15:ea:ba:1f:4c:8f:
46:53:e2:40:21:71:21:8b:20:cf:36:20:53:72:c5:
6b:65:f2:90:9b:67:bb:03:b6:d6:d8:ef:be:e7:75:
37:a6:61:6a:f0:a4:a8:b3:dd:0a:22:68:4a:d0:ad:
54:f7:1a:32:2f:62:c3:dd:51:b4:e4:46:ad:e2:6a:
b9:0f:15:9f:3f:12:c9:e6:00:e5:33:7b:de:e5:a8:
6e:89:63:9f:73:54:14:38:1c:38:90:ff:aa:bd:43:
b1:a9:5c:ff:17:e1:79:76:07:27:e8:57:03:ef:ab:
49:58:36:45:cd:a5:48:65:1a:b3:88:f6:65:3e:ff:
4f:81:d6:fd:a4:f4:c5:af:36:e2:ae:e2:13:e5:77:
28:32:93:54:48:ff:ff:85:c5:c8:8c:e0:7a:95:72:
ce:52:79:e8:7f:2c:6b:9a:29:69:0b:a3:a1:70:0f:
68:d6:16:55:66:1f:73:fb:15:c2:93:c6:41:fa:5e:
35:f4:49:11:92:62:2e:d4:72:32:fa:3b:a9:49:58:
df:92:d8:ad:22:75:04:9d:dc:18:bb:5c:5f:e6:9e:
a1:a6:c3:7e:cb:93:8d:75:57:78:0e:1d:21:67:aa:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:FD:B2:96:C1:08:43:07:6A:90:13:A4:D9:5A:F3:AB:BC:EE:4D
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c9:b1:d8:74:97:87:90:64:22:40:94:d8:9f:0e:d3:98:a5:
21:6d:d2:68:5e:26:f3:81:c4:60:20:4a:2e:ea:39:01:53:f8:
6f:06:25:77:60:c7:74:ed:43:9d:b8:2f:35:4e:c5:5d:db:f5:
06:89:47:78:c8:c6:eb:3f:77:f5:bb:ff:d5:28:0f:68:2f:ab:
4a:86:3a:e3:98:7b:40:ee:7f:6d:be:df:69:ad:1d:dd:a8:7b:
58:8a:7a:7e:af:c5:ea:88:51:6e:41:5c:3f:47:4b:99:53:5d:
76:8d:c1:8e:11:fd:e3:5b:92:39:e6:26:a4:9e:38:3c:63:e0:
2a:7c:02:08:cd:89:ee:15:1d:8e:fb:62:b8:f9:c5:ba:15:33:
84:d2:3c:f9:c3:b2:08:c5:41:b5:d4:67:7c:30:8f:6d:6b:f2:
13:19:4d:01:4f:54:f8:f4:30:c1:46:a2:fd:3c:26:5b:43:b3:
02:b1:4b:1e:ad:e8:fa:54:61:e6:92:33:b7:b3:c0:5b:36:4a:
12:d4:9b:ee:5b:68:b9:9c:3a:39:65:81:e2:42:8e:b5:43:7d:
a2:9a:d1:ed:0a:f1:4b:5d:4b:0f:a7:c2:61:94:0f:6c:c8:bc:
41:21:9e:d3:14:42:d4:a2:8e:6f:44:48:5c:7f:a0:33:9a:25:
1e:c5:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:01 2025 by rpki-client