Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: QcsLlLUTUwI8tO6iSR9LS/pw3+iGUNtbSqeamA0dZJE=
Subject key identifier: 5D:5F:39:BE:56:0F:28:5C:06:54:8B:DC:1D:91:C2:59:2B:C7:61:D2
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 0199221E4024B87AE461B1A75A63C01EEB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 0DD4
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: ZAsyliItrCRn8D5948gRmxf8d1+nasDnBApQwJKUcto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:40:24:b8:7a:e4:61:b1:a7:5a:63:c0:1e:eb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=5d5f39be560f285c06548bdc1d91c2592bc761d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:45:49:a2:8b:48:ba:63:d9:ac:1e:0d:bd:
9d:52:ee:d0:5e:d3:5c:dc:33:1a:ca:49:31:8c:a1:
02:0b:1a:df:e8:da:31:58:f3:ab:4c:b3:4a:8d:6d:
4a:53:9d:28:8e:cd:f7:e8:d0:31:8e:ff:98:0d:5e:
60:91:04:ff:40:68:25:ac:66:ad:05:78:0a:c2:3e:
2e:24:f5:d9:e2:16:6c:a6:d2:b9:6b:9d:1c:1a:40:
a3:c5:d0:5d:d8:f0:a6:ed:ca:7c:b1:a8:81:44:ce:
23:47:90:01:fa:3c:32:3f:91:3f:4d:77:74:41:e6:
27:ff:e4:04:4f:da:c4:45:40:91:d4:90:b8:d6:09:
28:c2:4d:a1:48:4b:87:4d:33:da:5b:fb:ea:b6:f1:
61:df:83:b9:da:8d:b3:77:a0:d2:da:83:bf:35:09:
fd:b4:a8:3a:8e:e9:93:4c:d1:d0:00:7a:8c:64:b3:
3e:e2:7e:e6:10:c6:b5:a2:fe:b5:05:ae:a3:a0:dc:
5f:7e:02:f0:49:78:71:26:7f:8b:1b:34:9f:8a:c3:
41:9f:74:04:74:ed:7e:b8:6c:d3:d6:c4:a3:c1:3b:
f9:e4:f7:44:41:7e:e7:c9:1c:9a:6a:7f:b5:ba:f0:
1e:ff:f4:dd:f5:f6:d3:a2:49:12:5c:e2:fe:33:e5:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:39:BE:56:0F:28:5C:06:54:8B:DC:1D:91:C2:59:2B:C7:61:D2
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:77:69:0c:a3:1a:20:5d:3c:8e:b0:39:8a:38:e7:3b:6c:
1d:12:2e:0e:27:6f:84:33:06:fe:8a:39:e2:f0:19:f9:99:7b:
66:db:91:7d:1c:86:1c:2e:c3:3b:2c:85:7b:db:ea:4a:a0:b0:
8d:44:3f:0c:31:3b:01:d6:21:06:17:81:5d:0f:d3:fb:86:1b:
12:33:c5:05:d7:c3:7d:8a:8a:01:88:4c:c4:1a:ed:15:1e:72:
74:37:d1:1f:3d:25:88:4b:92:50:59:63:39:76:b5:23:d3:02:
1c:13:8a:3c:c3:c4:22:eb:20:3f:6d:ba:0b:bf:61:7c:f9:dd:
68:63:1c:1f:b5:d3:28:6a:9c:4c:3e:39:13:37:55:28:bc:b6:
28:1b:c5:5a:c3:93:72:0c:83:31:88:24:a4:1d:f4:e2:1b:0a:
9d:ad:5f:e7:f3:54:b5:a3:2f:cb:29:6d:28:f1:77:69:c9:8d:
ca:19:90:14:43:75:4e:19:8c:e8:bd:6b:17:63:16:9b:69:fa:
e2:78:6b:39:d2:77:71:66:3c:c4:4c:da:a9:f4:90:ad:e2:16:
91:13:81:7c:5e:74:e9:ec:e7:f4:09:9b:c2:4f:c6:a3:2c:65:
34:0a:ba:19:c5:ae:d2:ae:f3:08:4c:24:17:f2:87:1b:53:ce:
43:83:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:37 2025 by rpki-client