Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier: 2+MRjyi6G+8Gz3Qv7QO6LeFxJ+B0I72+XXKWWH8f474=
Subject key identifier: 3C:86:7F:24:37:73:EC:E7:5F:32:58:6F:40:70:6F:6C:F1:6B:E7:C4
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial: 0197696119D43746896C5F043E8F0E996AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number: 0CA8
Signing time: Fri 13 Jun 2025 13:01:00 +0000
Manifest this update: Fri 13 Jun 2025 13:01:00 +0000
Manifest next update: Sat 14 Jun 2025 13:01:00 +0000
Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: LjopDREd+1/h55EAZXRlpThL4vtjKX3va4mQbVe9Vpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:19:d4:37:46:89:6c:5f:04:3e:8f:0e:99:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
Validity
Not Before: Jun 13 13:01:00 2025 GMT
Not After : Jun 14 13:01:00 2025 GMT
Subject: CN=3c867f243773ece75f32586f40706f6cf16be7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:71:7c:5d:9e:61:a4:38:b4:2e:d6:82:e0:
af:5b:ef:2e:b0:67:4f:76:fd:20:29:bb:88:1d:8b:
d0:85:84:27:c5:c2:c5:e0:dd:21:c2:51:d9:97:ea:
01:9c:6e:8f:a6:a8:2d:f3:83:9b:dd:a1:f6:9b:6c:
e2:c1:47:d7:db:d8:ae:bf:33:5b:75:62:68:ed:e8:
60:45:94:65:7e:be:f6:f2:00:57:7c:ca:c5:27:46:
20:4f:7f:c5:d3:b0:d6:68:68:ec:86:c9:75:91:bf:
87:d9:52:af:dd:64:d9:d5:cc:cf:d9:7a:00:9d:df:
b7:85:d8:71:b7:07:c7:26:b9:cd:c0:69:96:32:70:
c4:b2:c1:a3:52:3b:21:aa:51:d4:fa:f9:0f:0c:2a:
ee:0b:22:12:72:e2:51:08:0b:0a:bd:75:c2:34:f4:
18:b3:bd:55:6d:f9:56:d3:12:37:d2:f5:b1:6f:64:
88:ff:e8:59:c7:24:86:60:91:5a:61:27:41:23:89:
c4:49:06:36:07:58:c6:0d:eb:d4:f1:af:8a:6d:87:
a5:c6:ec:d9:99:0a:a2:a1:ed:a1:4c:cf:6f:11:dd:
f4:89:79:01:9e:20:f6:cb:24:d2:43:23:64:92:ff:
68:86:f9:e7:46:4e:39:77:55:4e:ad:b2:27:a7:c2:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:7F:24:37:73:EC:E7:5F:32:58:6F:40:70:6F:6C:F1:6B:E7:C4
X509v3 Authority Key Identifier:
keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:32:45:45:de:69:ef:8c:f7:9a:60:de:96:3f:ab:eb:7d:29:
18:f0:af:ca:9b:24:4a:fc:fb:33:cd:80:c3:eb:2e:5d:58:89:
58:02:83:69:d3:e3:31:b5:be:e1:e1:4c:84:ff:7e:7f:07:fe:
9e:2c:bf:7f:5d:1c:3d:b4:25:04:ad:19:71:bb:2f:fd:0d:64:
53:3b:e2:1a:f1:7f:61:d1:e0:0c:62:25:89:46:df:cd:a8:d0:
b9:e5:da:eb:a2:30:94:81:86:7b:d9:8f:29:49:bb:3f:5b:52:
be:98:45:ab:2d:7e:cd:df:d8:70:24:42:61:51:9f:bf:37:73:
e1:88:93:1a:dd:dc:4a:92:22:eb:7e:14:1f:24:2f:4e:0d:c6:
b2:b6:17:ac:21:15:3a:06:f9:55:bd:5e:c0:a8:37:3f:b1:82:
7f:6b:86:f0:9f:a9:2b:c2:f2:e4:6b:1d:5f:b7:40:a6:89:a1:
06:f7:ed:a1:42:c1:dc:46:4b:0e:5e:8c:34:fd:fb:a8:31:30:
9c:44:8d:7d:54:e6:85:ed:0e:dc:a5:64:52:be:50:e9:79:93:
1b:89:f6:6d:4e:6e:bc:27:ba:b6:52:e1:05:6b:1b:76:96:a4:
ca:72:5a:57:30:07:c2:1a:de:70:03:11:39:5e:09:67:81:d6:
e5:79:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:50:57 2025 by rpki-client