Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: 6/oHQY2QVisSz75mgS4gZZ+W70w0DqNOn0FJFMIQVFA=
Subject key identifier: EF:69:FC:CC:A3:09:0F:E8:91:88:44:44:E0:DA:7D:01:91:90:18:B1
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 01992443A272EDBD592D1436BD4D09170B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0559
Signing time: Sun 07 Sep 2025 13:00:36 +0000
Manifest this update: Sun 07 Sep 2025 13:00:36 +0000
Manifest next update: Mon 08 Sep 2025 13:00:36 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: WhogDW9yqSBgVx5/bnmFClW7asGevhxgVe1IoyhZJ9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:a2:72:ed:bd:59:2d:14:36:bd:4d:09:17:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Sep 7 13:00:36 2025 GMT
Not After : Sep 8 13:00:36 2025 GMT
Subject: CN=ef69fccca3090fe891884444e0da7d01919018b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:fb:2b:41:e3:f3:1b:a9:c7:58:0d:9a:96:
0f:25:e9:59:20:00:5e:6d:5a:cd:3b:aa:48:ad:21:
f3:a2:f3:a0:c5:3a:d2:65:eb:66:8c:50:c4:7c:45:
26:90:02:12:f3:60:f8:1d:3e:8c:8e:28:31:f6:3e:
97:07:76:ed:f8:6c:7d:44:40:0d:63:ea:a4:67:de:
36:2b:10:55:cc:fd:93:94:d2:3a:7c:7c:fe:ad:53:
b1:e9:ae:8a:03:f5:ac:f9:29:48:fd:8c:30:a1:3d:
0b:b5:6c:ef:e6:cf:c4:f7:d1:98:b8:5f:98:c1:6e:
47:6d:fe:df:cd:d0:a9:42:6a:f4:d7:2d:c4:63:a4:
f9:33:0f:45:f6:4b:73:5e:df:bc:2d:48:29:be:2f:
f2:b7:77:f1:a1:4f:a1:fe:dd:29:e1:05:44:c3:d3:
f5:a9:74:73:0a:58:c9:e0:4e:7b:46:b6:a2:93:02:
9a:46:74:73:a2:0f:cf:10:47:c0:a5:b4:97:e8:35:
fd:4b:81:85:d3:9f:02:34:20:99:7d:56:7d:9b:a8:
aa:90:85:fd:ae:37:bf:cd:fd:13:2f:32:a8:6c:c3:
e1:3a:7f:8a:a9:53:1f:d6:93:bf:96:54:b7:8e:4c:
b8:ef:73:0c:cf:3d:82:1f:c2:f7:c6:98:62:51:94:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:69:FC:CC:A3:09:0F:E8:91:88:44:44:E0:DA:7D:01:91:90:18:B1
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:24:d7:71:69:4e:48:67:09:13:ed:43:4a:87:89:43:1d:32:
da:f4:a0:fd:8f:b8:0f:be:b5:90:30:ba:cd:a3:48:5d:d3:48:
77:00:e5:88:ba:b5:ff:bc:da:2e:29:cb:88:92:8e:a2:99:3b:
9f:4f:91:a1:3a:b1:2d:31:bc:70:4a:ed:00:b3:6d:44:fc:74:
fc:c8:48:16:3d:29:3d:3a:19:2c:2a:4f:eb:64:d1:46:74:91:
62:21:2d:eb:e4:55:42:2b:62:07:f6:18:e7:b0:f3:c9:a3:51:
86:52:42:ed:2b:5b:6b:ad:da:4e:64:63:15:23:70:ba:56:9f:
bb:c5:c4:e4:87:c1:27:9b:7a:7f:b6:86:e1:c7:89:1a:23:f3:
06:04:07:a0:d6:a8:79:05:0f:72:7b:30:47:45:d8:42:70:d4:
15:0b:e8:8c:d3:9f:12:fc:42:0c:ef:b5:1c:b8:92:89:bb:b5:
3a:00:fc:b8:01:ed:62:8a:1d:2b:b8:ba:f5:d1:7e:4b:d5:fb:
15:2e:cb:da:e9:f1:6c:41:78:a4:3e:cc:85:26:6f:42:93:52:
eb:58:15:a0:13:21:74:5c:2e:2f:97:d3:eb:fa:b0:e9:3a:83:
bb:97:1b:ae:2f:bf:9b:66:b7:90:8e:1b:03:12:5c:b9:7c:1b:
d0:72:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:43 2025 by rpki-client