Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: YS7LukFIWijtdiMf84npAFLa/QIq+tvvCybVzW2cB+s=
Subject key identifier: CA:6F:9F:AB:63:30:43:50:1B:E6:71:85:37:AA:EC:61:2B:2D:0A:2D
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 0197469E8607B6D37BD0E5822054C2BA1FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 1236
Signing time: Fri 06 Jun 2025 19:01:23 +0000
Manifest this update: Fri 06 Jun 2025 19:01:23 +0000
Manifest next update: Sat 07 Jun 2025 19:01:23 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: x2RGDoG+hCpWnLh5t9H1eB182eeO6GzSY3erBNoJBZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:86:07:b6:d3:7b:d0:e5:82:20:54:c2:ba:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Jun 6 19:01:23 2025 GMT
Not After : Jun 7 19:01:23 2025 GMT
Subject: CN=ca6f9fab633043501be6718537aaec612b2d0a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:8d:ec:0b:ce:d5:df:19:6b:b6:38:c2:5a:
4d:12:b4:49:77:0f:8a:84:4c:5e:15:f8:61:68:c9:
f0:54:4f:df:3d:44:8c:b3:3e:89:e4:83:fc:34:02:
d6:d3:8b:bb:6b:1b:b1:64:35:35:de:93:47:2f:b1:
79:64:b8:90:b9:e6:b9:55:c9:e0:24:cf:b8:c4:01:
be:66:08:ff:5b:5e:11:4e:ab:df:b7:75:90:83:05:
07:d7:d9:7b:de:2c:4e:53:64:a8:d2:cd:a3:fa:86:
2b:3d:0a:46:b8:88:2b:83:bb:fc:99:55:1e:59:74:
e4:d8:4f:5f:00:47:ba:ef:a5:ef:9e:5c:71:bf:d5:
dd:46:bf:45:e5:04:56:c0:4f:d7:31:98:f8:a3:10:
78:8d:17:46:d8:45:1e:9e:fe:95:6c:ec:10:07:06:
b8:f4:9c:64:31:a3:11:52:4b:d5:c5:75:86:54:f1:
05:ac:a2:e3:6e:5a:8b:4f:65:6f:af:b9:78:33:b1:
be:3c:4e:2b:7e:b4:fd:85:96:09:ca:04:81:8c:4b:
4f:39:7b:ed:9e:0c:ba:ef:0c:fb:27:76:0d:73:c4:
02:0b:40:38:ed:db:07:c0:65:2b:f0:96:22:cf:d7:
95:f2:c3:49:a5:68:a1:e8:7a:34:e5:eb:15:5d:84:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:9F:AB:63:30:43:50:1B:E6:71:85:37:AA:EC:61:2B:2D:0A:2D
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5f:08:1e:3b:3a:e0:fe:06:fa:94:60:ef:79:b5:2d:e6:bf:
a2:4b:2c:08:d0:5f:32:e3:7b:bf:fe:34:cc:ed:3c:54:8f:99:
17:0a:6b:9c:6d:71:c2:ec:dc:a3:78:89:f1:8e:9c:56:ec:86:
78:8d:8f:da:e4:19:4f:d3:4a:32:93:b1:41:cf:99:44:77:b4:
96:68:a1:16:39:74:73:4b:e6:41:3b:8b:d6:0b:91:79:d9:2c:
e0:7b:c8:a2:88:a4:51:be:de:a4:8f:24:97:c3:b3:2d:e1:74:
53:22:8c:7d:4f:c3:86:69:d5:00:8c:23:7c:46:49:61:80:2d:
8d:2f:3a:06:ac:81:1f:e3:54:9d:f3:e1:d0:fe:f6:7c:2b:a8:
34:38:b7:93:01:35:a8:4b:87:e2:8e:d4:17:00:99:52:46:79:
76:2c:89:de:54:d3:6a:a9:43:76:fd:37:c4:55:1a:b6:0e:76:
c8:10:bc:bd:e8:5b:e3:8a:87:7e:6d:00:46:08:d0:03:ed:85:
81:d3:83:be:7d:c7:87:3a:88:5d:2a:d0:d3:7c:9e:44:4c:1b:
51:a5:d1:3e:fa:23:9b:80:a7:8f:40:99:8e:49:f6:cb:65:79:
de:91:73:95:6e:67:95:ca:f4:06:8f:72:e1:46:b4:ff:4c:72:
cc:87:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:24 2025 by rpki-client