Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: Hb6TaZmej3bEudmLvNMlby+9UhwKOXyhd91TMbIyLF8=
Subject key identifier: F5:CA:E7:83:7C:0E:71:C2:80:29:CA:83:B0:C3:20:7D:F9:48:AB:48
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 0197488C9352C9A5C1AFCAEF34E43664FE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 11B4
Signing time: Sat 07 Jun 2025 04:01:01 +0000
Manifest this update: Sat 07 Jun 2025 04:01:01 +0000
Manifest next update: Sun 08 Jun 2025 04:01:01 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: N5pyu4wE8JmRLJriGacuNqVw9cItW3NkC8jwGxIV3po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:93:52:c9:a5:c1:af:ca:ef:34:e4:36:64:fe:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Jun 7 04:01:01 2025 GMT
Not After : Jun 8 04:01:01 2025 GMT
Subject: CN=f5cae7837c0e71c28029ca83b0c3207df948ab48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:49:f1:e2:98:1c:f9:f2:59:d8:3c:db:cb:
89:52:f4:3a:a1:5a:7d:32:8a:6d:98:a5:a5:ad:49:
b2:2b:aa:07:ec:72:2b:4a:12:f1:50:50:cd:77:ce:
95:7b:cf:99:20:82:b7:06:c4:fb:5e:34:05:7f:25:
63:d8:5b:82:04:71:80:79:9e:de:d5:67:de:da:50:
9b:40:a6:a4:93:1d:ff:0e:15:57:14:6c:3e:c3:ad:
f2:1e:46:7f:d3:83:63:04:b8:e4:02:e8:16:ae:eb:
14:21:ec:73:2b:ea:50:d7:2f:72:cf:fb:9b:02:a5:
e6:cc:b7:6e:63:1a:4f:0a:f9:6a:b7:54:23:44:fa:
3c:25:5f:7e:57:bb:0c:e2:d2:3f:eb:ca:cc:0e:42:
09:46:34:0a:a8:0c:91:06:c3:78:11:a1:38:5b:90:
b7:9c:b0:41:9b:f6:8c:cb:ee:00:bf:49:48:45:fc:
27:59:a8:11:36:89:15:53:3d:a4:0f:a0:07:d1:af:
8d:19:dc:43:aa:0d:e3:87:0d:b4:dc:1e:1d:5b:6d:
ec:7c:98:02:2e:6f:96:31:cd:97:32:c1:75:10:fc:
63:e1:e7:4b:15:30:4e:34:4e:2a:a3:76:09:09:0a:
56:90:ca:44:23:c2:19:c1:f9:c8:50:c8:6e:6e:0d:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CA:E7:83:7C:0E:71:C2:80:29:CA:83:B0:C3:20:7D:F9:48:AB:48
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a2:70:47:00:25:ae:ec:c6:51:b9:c7:de:36:58:cc:b4:3d:
6e:19:8d:3c:66:e8:3c:ca:ed:52:94:1b:c5:ef:4e:06:e2:e8:
05:b0:ab:16:1d:6d:a9:cc:92:2d:2d:ae:72:79:98:86:01:3d:
e5:35:7d:d3:65:a2:27:b1:67:fa:99:49:5e:f9:a8:12:a0:5a:
d4:4c:93:49:c2:05:24:81:66:61:df:1a:9c:ef:73:dc:d4:38:
7e:bb:32:a1:f1:76:ff:35:a8:34:05:b2:a1:b1:f5:57:31:91:
3d:24:2f:91:25:12:5a:44:2c:e7:f1:6a:ab:02:a4:6e:86:1e:
21:1f:0b:4c:87:fb:22:57:e5:7a:3e:c9:ac:8e:58:a1:09:c2:
1b:fa:ce:4f:99:3f:e5:6a:ca:dc:49:e5:3f:fd:3c:76:12:1a:
f2:b4:ed:72:09:a6:6a:c4:af:d5:7d:ab:b8:f2:df:55:11:ca:
bf:f6:16:f5:ee:ac:c3:52:8a:2d:47:ab:56:19:56:77:30:e4:
3b:b8:10:6e:0d:a7:ce:fd:2c:0f:81:a3:64:05:6a:e1:6e:96:
f1:3f:44:65:84:30:ea:70:9f:95:54:ec:6f:31:af:7c:84:af:
c2:78:cd:90:44:ac:70:4f:39:3c:f6:43:d4:39:b3:84:40:7c:
4f:42:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:24 2025 by rpki-client