Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier: WDDTFPeId9TwgG6uX01qMJlK5lSRUb+lzFpQZ7+B+RY=
Subject key identifier: CA:61:62:19:1F:37:B1:AD:B5:70:16:EC:AC:24:0E:5A:95:1A:E7:83
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer: /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial: 019750EA7DE9A68621204EF88CDA0830E724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 19:00:34 +0000
Manifest this update: Sun 08 Jun 2025 19:00:34 +0000
Manifest next update: Mon 09 Jun 2025 19:00:34 +0000
Files and hashes: 1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: YE8pFL9KmKrRygdR9BmIXYFiFPYk8a7WNW4HMNDxDfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:7d:e9:a6:86:21:20:4e:f8:8c:da:08:30:e7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
Validity
Not Before: Jun 8 19:00:34 2025 GMT
Not After : Jun 9 19:00:34 2025 GMT
Subject: CN=ca6162191f37b1adb57016ecac240e5a951ae783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:df:c4:d6:3f:cf:cf:c4:f9:dd:5c:18:c8:b7:
5b:46:73:30:0e:3c:82:93:12:c4:e7:45:00:5a:ca:
42:d0:ac:3f:4d:0e:4c:75:7b:d3:68:25:0d:e4:13:
c8:c1:a4:18:61:1b:a4:8f:aa:d7:c0:81:2a:be:39:
5e:08:f9:0a:7a:3e:f2:39:87:e8:d0:46:b4:b2:fd:
c0:d6:09:00:79:03:ad:26:c7:95:01:0f:73:9d:9c:
40:cc:0e:e2:b3:e8:fa:1e:7a:e5:45:e0:27:ef:3c:
77:42:f2:76:de:ed:b4:a6:07:9f:b6:b4:d9:fa:b2:
ab:fa:ab:d4:c9:61:a4:38:76:95:ae:61:dc:1b:38:
50:6b:3b:ce:9d:08:65:a2:bf:7c:ac:a6:36:9f:09:
c2:16:0f:81:b9:76:9e:07:3b:07:06:d0:ab:83:0b:
b7:6c:18:7c:93:9e:2e:f2:2d:aa:81:d0:9b:81:a7:
06:49:c6:44:52:64:85:c3:aa:9e:0d:6a:92:48:57:
14:e0:dd:9c:30:94:aa:7e:7a:5f:c3:43:39:1d:93:
75:80:57:43:14:4d:71:fb:c3:e7:d5:a4:43:0e:ee:
b2:97:21:d9:06:5d:04:59:83:88:4e:38:10:20:2a:
40:ed:4e:2a:d0:55:88:ee:58:c5:5b:2c:17:2f:0f:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:62:19:1F:37:B1:AD:B5:70:16:EC:AC:24:0E:5A:95:1A:E7:83
X509v3 Authority Key Identifier:
keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:cd:77:47:8b:30:18:34:b8:6d:70:13:3f:fb:5b:7c:8c:
b0:5b:f6:eb:5f:97:30:d6:d4:91:66:c3:56:4e:b9:1e:f4:50:
05:f3:b8:1d:98:b5:8d:57:8e:15:93:fc:5e:c1:e6:5d:16:cb:
9f:6b:99:78:cc:5a:e3:cf:b9:dc:10:b5:d2:e5:f0:71:7d:4e:
42:3f:45:82:cd:a8:a2:d8:35:75:d4:0b:79:5c:a9:2d:89:ac:
ec:45:ed:5e:83:13:c6:5a:08:27:87:55:5b:1d:43:ff:85:23:
ce:54:6a:b4:9e:53:79:98:87:5f:77:41:69:2e:ae:00:37:0d:
05:99:77:c2:fc:a4:c1:9d:b5:b4:35:16:fd:87:ef:2c:9e:13:
fc:c0:aa:38:48:6e:f4:54:d1:a0:55:bc:40:33:e3:d3:46:f1:
8a:ee:79:19:b8:69:df:a7:67:99:d6:76:68:f1:55:77:1d:b4:
e6:7f:57:11:ad:97:fe:78:82:09:c5:2a:c8:07:98:b2:e0:16:
40:bf:5b:e9:ed:ea:b3:66:6e:4e:eb:8a:94:38:7d:de:f2:3e:
28:e4:28:75:80:9b:c1:14:a6:69:d2:7e:e4:89:a7:c8:44:7c:
26:5f:15:bb:05:df:b2:93:7f:d4:cb:3c:bc:d1:d0:40:a8:4a:
ff:e8:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:32 2025 by rpki-client