Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: Z4qfoLRfqyvP5KZ+0wCDNaYVZqKIlZi/2H1sN5odlm4=
Subject key identifier: 3C:9B:DA:32:70:C3:85:27:3B:27:BC:BD:3F:8B:57:6A:05:76:68:2E
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019923A09C56EDE5D63B03554CE153099991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:32 +0000
Manifest this update: Sun 07 Sep 2025 10:02:32 +0000
Manifest next update: Mon 08 Sep 2025 10:02:32 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: T3SP35M9hP4YFdBmuVJBg3R50QG6tWNyk8NsCkxvYFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:9c:56:ed:e5:d6:3b:03:55:4c:e1:53:09:99:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Sep 7 10:02:32 2025 GMT
Not After : Sep 8 10:02:32 2025 GMT
Subject: CN=3c9bda3270c385273b27bcbd3f8b576a0576682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:ce:ab:85:4c:c2:37:3e:7b:2d:b1:dc:f0:
56:26:dc:15:11:44:80:59:a6:54:f9:55:d5:a0:d7:
cd:e1:57:38:34:06:13:c8:1a:42:80:69:4b:56:53:
4f:23:47:6c:7a:b7:20:81:0a:27:45:8a:69:88:49:
14:9e:74:bf:28:02:de:1d:d9:67:36:ac:e6:19:da:
39:7f:ba:c3:69:44:3b:65:6d:c8:6f:9f:8e:af:cc:
e0:f1:5b:a5:04:0c:80:74:41:65:48:46:0a:79:96:
0b:d9:e2:d8:f9:c5:69:96:d9:fd:cc:1c:39:03:70:
85:ae:16:3d:d9:72:54:96:85:29:d4:a7:8d:41:b9:
78:74:31:4b:6a:5d:bd:60:ab:e3:5a:68:0f:65:f4:
73:dc:6a:2d:a4:85:0b:05:8a:39:23:8d:ef:ef:76:
74:22:cf:9a:ff:02:88:ff:9e:9e:35:21:e5:fd:c6:
87:0b:dc:86:26:64:f2:1a:91:a4:5b:b1:30:9d:8c:
f6:77:c8:0e:f4:06:0e:cb:3c:2a:fc:4e:d3:61:fd:
64:97:e9:ea:5a:39:a2:0d:42:b3:83:af:e1:fa:b8:
cb:16:0a:2c:5b:9d:34:17:df:5f:c0:b6:8d:a0:de:
72:07:b7:45:33:73:ba:c0:41:4e:1b:9d:f7:95:62:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:DA:32:70:C3:85:27:3B:27:BC:BD:3F:8B:57:6A:05:76:68:2E
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:47:d3:77:02:ab:98:a9:5c:ed:c6:e1:a8:2d:a5:ee:59:c5:
bd:62:77:3e:45:0d:15:d2:a6:27:c0:6f:55:a3:65:00:a4:13:
ac:e9:15:ff:67:33:e6:91:31:a8:c9:2a:a3:31:8f:5f:f9:6d:
9c:95:93:9f:46:bc:19:d4:b9:ca:99:f2:a5:c0:11:75:bc:21:
13:42:84:c9:32:db:25:38:73:3d:0c:6b:00:90:e3:72:63:65:
73:9c:42:34:77:cc:19:dd:12:2f:56:df:ce:1a:bc:3f:42:1c:
e6:11:65:88:cf:95:3f:84:7c:a0:7f:05:8c:7e:8e:75:17:c4:
97:94:48:72:97:8a:7f:86:90:e1:26:72:ec:f4:26:76:64:d4:
2c:10:c0:ad:bf:a2:ce:7c:d8:98:29:21:98:3d:bd:fe:53:8b:
4b:aa:25:c4:06:db:4b:9b:b7:17:1c:0f:5d:af:ac:36:91:f2:
9e:8b:6c:14:d3:fa:f0:e7:e5:b3:7a:da:81:88:d5:04:4c:85:
66:e2:f0:3c:7a:26:55:ce:ba:a7:c7:7c:9d:76:7d:6e:92:1b:
ec:08:01:32:42:c3:5d:e9:00:1b:2c:6d:3b:2a:20:aa:11:8d:
26:de:34:11:8d:71:3d:0c:74:26:15:86:cd:7f:2f:58:88:54:
2d:f6:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:12 2025 by rpki-client