Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: MW5u5Sh9rt+WFjd9Pwxw2KpDScCiHuNKaP2xx6/bHU8=
Subject key identifier: 28:FB:DA:4A:85:55:F5:05:C7:FD:31:8D:D4:59:A0:4C:AA:1F:4E:06
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019749313CACA2F589C55F932BE149B8D4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0463
Signing time: Sat 07 Jun 2025 07:00:52 +0000
Manifest this update: Sat 07 Jun 2025 07:00:52 +0000
Manifest next update: Sun 08 Jun 2025 07:00:52 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: co8s+sSeQz7NQVozTnFJKuebFkdL518n2ucuDLsuwyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3c:ac:a2:f5:89:c5:5f:93:2b:e1:49:b8:d4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Jun 7 07:00:52 2025 GMT
Not After : Jun 8 07:00:52 2025 GMT
Subject: CN=28fbda4a8555f505c7fd318dd459a04caa1f4e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:81:ca:8d:3a:fc:15:ce:13:ec:15:cd:7e:
f4:e8:4a:8e:3c:6e:0a:7f:2e:a0:4a:1d:aa:54:c5:
ce:de:b9:3a:c4:53:bf:52:85:83:88:24:5b:39:fa:
62:41:15:56:11:5e:76:71:50:b5:ce:df:11:4f:38:
cd:44:e0:ea:eb:f9:f2:d2:cd:54:0b:91:4b:51:92:
02:b3:a2:78:69:77:10:4f:91:77:dc:e6:d4:fd:6b:
a1:01:d1:9a:64:35:32:3c:9f:cd:7d:b1:29:91:e6:
be:23:a6:bb:b3:02:ea:17:9f:95:d2:21:ac:64:15:
73:ee:ab:51:c8:b1:30:46:cc:fa:06:e9:71:99:fd:
38:48:28:63:2f:92:e1:47:00:e4:ac:e9:3b:a9:52:
57:bb:c8:37:96:84:55:86:2a:42:2e:66:b6:b2:3e:
a5:03:c5:8e:69:9d:09:42:96:90:d4:70:32:5a:6d:
7e:d2:41:ef:15:47:e0:8b:79:b7:83:0e:d9:7f:a3:
99:ae:82:57:4b:b2:37:65:d0:1d:49:00:a3:1d:77:
5b:05:fe:78:21:fb:fe:2e:3d:08:7d:65:7d:e9:cc:
91:35:48:b4:14:f1:d5:ef:0f:6a:14:8a:76:97:41:
33:39:09:07:dd:02:0e:34:c9:46:42:b4:e0:fb:72:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:DA:4A:85:55:F5:05:C7:FD:31:8D:D4:59:A0:4C:AA:1F:4E:06
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:28:1f:84:47:76:71:43:bd:ff:06:76:0f:09:60:ac:77:
ba:e0:c4:9e:c6:3b:4a:e6:4a:6e:91:e5:5d:1f:05:b4:d0:f6:
46:a8:2d:be:95:06:02:5c:75:2a:fc:a7:26:89:a3:99:85:2a:
14:f6:85:c0:bc:63:cd:1f:24:e4:14:90:0c:52:67:5e:19:e7:
8c:43:23:5a:1f:ea:7a:04:b9:7c:07:bb:ba:cf:1d:a6:b6:a9:
12:e1:96:40:d1:e7:b0:a4:38:cd:32:cf:9c:02:0c:d5:ba:38:
ef:31:b3:08:a8:77:64:2d:9d:1b:16:d7:ad:ed:d4:21:00:e3:
7e:95:40:be:58:7d:9b:ca:9d:9d:01:9e:0b:62:62:aa:e5:ca:
9d:83:46:24:03:af:74:e3:9e:6b:42:7e:e7:42:0d:40:9c:e9:
00:d4:49:e2:70:28:c8:d7:40:82:5a:01:f2:4c:72:54:74:29:
d4:6b:ac:43:2d:0a:ed:37:0e:ba:f9:f7:25:8f:18:c5:d4:70:
46:95:00:3f:c8:9a:b5:c9:39:11:f4:23:f2:7f:f7:9f:d0:6c:
40:91:99:47:17:7a:90:0d:76:7a:cf:e0:4c:74:1b:98:32:90:
9d:25:1c:8f:d8:51:2d:5f:ae:dd:b4:41:5e:b3:62:51:76:cd:
03:00:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:00 2025 by rpki-client