Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier: W+DnrbyJOrSZwgAOP34x2xTuGUokt3B0aL84D/zuYKE=
Subject key identifier: 5C:96:E8:8A:6B:E5:55:58:20:DD:E4:4A:6A:78:7A:17:50:67:A7:1B
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial: 0199240D97B190D652385B185E5074158DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number: C3
Signing time: Sun 07 Sep 2025 12:01:34 +0000
Manifest this update: Sun 07 Sep 2025 12:01:34 +0000
Manifest next update: Mon 08 Sep 2025 12:01:34 +0000
Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: iyHm2d6Eift29kVTaZAmt8u6b43PJCdh1EebCAOe984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:97:b1:90:d6:52:38:5b:18:5e:50:74:15:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911c4809872294be5817b159e59f29e50609636
Validity
Not Before: Sep 7 12:01:34 2025 GMT
Not After : Sep 8 12:01:34 2025 GMT
Subject: CN=5c96e88a6be5555820dde44a6a787a175067a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:c9:4e:a2:e8:37:15:84:25:74:af:fb:f6:
51:eb:77:68:d0:b3:ba:39:d2:08:a6:68:ff:3f:eb:
d7:17:36:16:bb:cd:d7:b9:2f:72:d1:d6:88:68:0f:
e7:b4:24:dc:e5:db:eb:b2:a2:45:61:70:cf:90:aa:
73:58:87:8b:f2:6c:a0:c1:8f:14:49:48:9a:29:cd:
c4:07:fc:d6:ff:25:98:ff:b6:0e:21:7d:7e:30:f9:
72:19:10:e7:31:43:e6:12:65:d3:c6:2a:69:f9:84:
e3:19:89:db:81:f3:33:b5:85:32:a3:bf:d3:12:e5:
c9:a2:e7:9f:a6:e8:68:45:f0:7b:aa:eb:ae:a7:36:
db:d2:08:91:9a:14:2b:88:17:9c:8b:c9:dc:df:36:
27:8a:48:df:f1:3f:0e:b0:d3:d9:f7:0f:11:63:6f:
41:97:0d:13:97:6e:05:6d:19:48:fa:cc:77:f9:5c:
7a:f0:ca:fb:39:2a:4c:4e:c0:ba:be:a4:cc:9e:61:
84:46:33:36:c5:1e:b4:89:a9:ca:70:9e:22:32:cd:
53:76:5e:e1:4f:42:61:f6:61:ab:97:ec:90:62:8c:
48:fb:f4:4d:e6:7b:15:e7:81:98:8b:0c:4c:a7:d4:
8b:60:b9:40:8c:8b:6a:f2:90:c1:d8:f9:8e:7d:6d:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:E8:8A:6B:E5:55:58:20:DD:E4:4A:6A:78:7A:17:50:67:A7:1B
X509v3 Authority Key Identifier:
keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6d:cb:b4:b2:d3:73:da:75:e5:6e:a6:b7:e0:9c:15:bd:ed:
f1:2d:80:c7:47:cb:83:62:41:93:10:0b:1d:29:46:24:e3:23:
ce:3d:2a:10:2f:e3:c5:cc:42:b1:6c:ca:91:eb:71:98:23:bc:
8e:aa:6c:57:cb:0e:54:ff:d4:4e:08:5b:a1:a4:f5:98:60:88:
72:f2:c3:64:e4:02:58:0e:83:30:69:16:b5:ef:50:c4:13:ae:
d7:39:af:4f:ed:e3:f6:1e:30:81:b2:65:67:86:f8:f0:f3:f0:
8b:2e:af:59:bb:9d:08:be:02:27:76:7e:fa:0f:1d:ec:30:df:
9e:85:7b:e5:ef:51:d7:92:4e:c8:12:f3:27:d5:8e:f3:7f:d3:
df:28:63:1e:2a:1d:56:f1:2d:52:d9:a4:15:d6:3c:8a:62:c8:
6e:ee:cd:c3:a4:6b:33:f9:ef:67:15:f3:4d:ef:09:e7:b7:03:
ca:71:5b:ea:42:0a:c0:55:a3:4d:82:b5:de:4b:3c:3b:af:90:
4d:27:02:57:fb:4f:18:bd:c8:ef:c3:51:12:e9:9e:94:6c:84:
e6:3d:6b:6d:a3:b6:a7:99:41:5e:85:e8:03:0b:01:81:b0:c9:
e3:2f:f9:c2:c7:2a:03:54:c5:b1:8b:e4:0b:90:53:0a:c5:64:
95:0b:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:13 2025 by rpki-client