
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.mft
File: a3tNxJzDUDQveq4ssyBbn3dfZh0.mft (raw, json)
Hash identifier: eRvjRGfNHDiVPQcYvra50akep8kOM5PJ+3QHcit6ddM=
Subject key identifier: F3:67:E8:4B:5B:4C:CC:07:0C:8E:D4:FA:0C:34:B1:A6:6C:77:41:42
Authority key identifier: 6B:7B:4D:C4:9C:C3:50:34:2F:7A:AE:2C:B3:20:5B:9F:77:5F:66:1D
Certificate issuer: /CN=6b7b4dc49cc350342f7aae2cb3205b9f775f661d
Certificate serial: 01974A7B6415AF109ED21D41F641BB3D0196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tNxJzDUDQveq4ssyBbn3dfZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 13:01:29 +0000
Manifest this update: Sat 07 Jun 2025 13:01:29 +0000
Manifest next update: Sun 08 Jun 2025 13:01:29 +0000
Files and hashes: 1: a3tNxJzDUDQveq4ssyBbn3dfZh0.crl (hash: zF/xtvol8tYE9H/hvgTIpvX4Uh3MwDYwySmuAUnEOWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tNxJzDUDQveq4ssyBbn3dfZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:64:15:af:10:9e:d2:1d:41:f6:41:bb:3d:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4dc49cc350342f7aae2cb3205b9f775f661d
Validity
Not Before: Jun 7 13:01:29 2025 GMT
Not After : Jun 8 13:01:29 2025 GMT
Subject: CN=f367e84b5b4ccc070c8ed4fa0c34b1a66c774142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:29:ea:05:93:47:b3:d8:a4:4d:88:77:db:
b9:d8:a5:55:e1:97:53:63:80:f9:fe:3d:43:d2:9c:
e8:7d:5a:62:d6:17:45:fa:ca:23:a8:0c:74:0f:94:
e7:a8:e4:e2:64:37:7b:a8:03:30:be:7e:d7:d7:64:
45:f0:f4:4a:33:10:ea:52:69:37:f5:9b:b6:e1:c6:
2b:a6:db:f8:6a:ee:92:b7:1a:a2:04:3f:81:c0:b3:
8e:58:70:57:ee:86:ad:86:d3:09:0a:0a:f2:9d:94:
25:7f:cf:a0:b8:91:1d:2f:af:93:e1:db:0e:85:ca:
7c:30:c2:60:d1:f0:6a:00:2d:ee:10:40:7e:19:d4:
5d:32:38:e4:d5:89:77:6c:44:98:a6:4d:65:04:6e:
ee:50:e6:fb:05:f5:7a:ce:c3:23:af:ee:36:96:fd:
31:f9:bb:48:b4:95:ab:a2:2b:a4:35:b0:61:83:f2:
a9:e0:75:af:23:30:f9:aa:2c:f4:7e:f5:04:48:76:
26:63:52:fb:fe:df:f6:31:bc:71:03:a5:7a:e6:b4:
8b:d8:24:03:5a:87:9c:48:5f:a8:3e:dd:05:0c:21:
24:88:5c:e4:fc:5b:db:07:5e:2b:55:e2:c0:5b:06:
9f:d7:5b:d5:a7:84:99:33:89:31:e8:89:a2:b4:b6:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:E8:4B:5B:4C:CC:07:0C:8E:D4:FA:0C:34:B1:A6:6C:77:41:42
X509v3 Authority Key Identifier:
keyid:6B:7B:4D:C4:9C:C3:50:34:2F:7A:AE:2C:B3:20:5B:9F:77:5F:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tNxJzDUDQveq4ssyBbn3dfZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:71:67:a6:01:bf:f3:f2:28:1b:3e:ab:1a:a3:14:b5:e4:f3:
fe:e7:da:2e:ca:14:ce:b7:b5:86:a1:e0:1b:b3:a4:c8:6b:a5:
ce:e5:9b:99:f9:c0:74:d3:8b:7d:11:d4:96:db:37:4d:b2:8d:
24:a3:f6:b2:21:9e:c5:34:3e:2d:5f:38:09:38:d2:48:02:17:
b7:de:f4:e5:ab:c1:38:7d:61:b5:fb:c8:a3:67:d1:14:15:43:
79:03:02:58:74:4f:06:08:ae:b9:83:29:4e:f1:9a:f1:1e:c1:
f4:44:dd:90:1c:71:14:8d:6b:7a:c8:68:3a:e9:e5:6e:5e:5e:
7b:57:95:6f:50:52:e0:ee:3d:ae:79:fa:a4:a8:5c:ab:d1:04:
1f:d3:94:fb:bc:d2:2b:62:3b:23:88:15:75:c0:4c:7c:60:30:
09:fb:f9:d0:57:70:52:8c:3c:be:1d:a0:3f:b6:b4:b0:6d:6a:
1b:d6:fe:99:d2:31:51:fa:11:08:11:cd:55:b7:55:34:79:d5:
91:82:72:72:ed:34:ee:2e:05:a4:b5:9f:4a:15:9b:40:d8:cd:
ec:0a:89:05:07:5f:a5:b9:33:21:81:28:cb:31:33:3e:27:c9:
e6:6c:4f:1f:b0:39:e1:95:11:58:da:6c:87:52:2f:91:fc:47:
d7:dd:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:18 2025 by rpki-client