Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: PbKHwPb+2wzGe4fz4LhkR585wtK1OL1OGvrS/ikhCXo=
Subject key identifier: F7:B9:DB:A8:40:70:5D:DA:7B:3B:C3:94:64:1C:01:11:FD:33:61:0F
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 01974AE86A35DAA20E6D438DF7155E55D553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 0CE0
Signing time: Sat 07 Jun 2025 15:00:34 +0000
Manifest this update: Sat 07 Jun 2025 15:00:34 +0000
Manifest next update: Sun 08 Jun 2025 15:00:34 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: v3JcbOYSaFa0dZaXbSZxhe6tBqaCImjCEXAaL78V+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:6a:35:da:a2:0e:6d:43:8d:f7:15:5e:55:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: Jun 7 15:00:34 2025 GMT
Not After : Jun 8 15:00:34 2025 GMT
Subject: CN=f7b9dba840705dda7b3bc394641c0111fd33610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:e2:51:8b:eb:c4:52:1b:33:bd:be:b9:47:
f0:6d:50:68:f6:55:c2:3a:0c:89:9d:52:4e:a5:ac:
ba:74:b5:38:e8:b0:d3:60:67:f0:d8:64:6a:58:9e:
e3:0c:79:ee:53:66:91:0e:ee:ae:d7:fa:a7:72:bc:
94:44:31:39:c0:b1:3c:bc:6e:cc:82:bc:99:85:14:
7f:a5:f6:71:a9:cd:af:03:8c:ed:8b:ac:e7:21:9e:
e1:03:16:8b:45:d0:0b:66:84:a3:33:47:fd:95:7b:
d1:e8:35:82:94:31:f1:63:a5:d9:d8:7a:fe:49:fd:
d6:11:ae:51:f5:f0:f3:85:2c:ce:f7:31:9e:80:9b:
ba:e3:2c:d8:fe:9e:fe:87:5e:6b:0b:9e:a0:59:62:
27:45:7a:b9:0e:ba:af:e2:1a:94:cb:d2:c9:8b:51:
ff:ab:f3:7b:c7:22:3d:ee:79:9c:79:28:ef:1e:ee:
5b:cf:61:11:8f:36:05:73:55:45:24:46:06:b9:69:
f4:2f:a8:52:95:04:1d:90:1a:e2:d0:1c:0b:82:89:
4f:6b:d3:de:c8:fd:f9:98:af:e8:b4:81:94:2e:ed:
fb:58:93:90:8a:b2:a4:7f:69:0b:f4:4e:2e:44:65:
cc:c3:fe:71:4c:f4:9a:e0:da:28:05:2f:69:ae:38:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:DB:A8:40:70:5D:DA:7B:3B:C3:94:64:1C:01:11:FD:33:61:0F
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:82:8c:95:60:da:3e:6d:d5:40:b4:ae:22:fb:4a:8f:36:
64:db:5b:0f:b2:86:46:6e:29:71:c0:1f:78:07:6d:97:c9:4c:
7d:e3:63:d4:d8:3e:21:7a:0c:da:7d:df:68:ba:46:dc:99:a8:
96:57:b9:09:ee:3f:27:9f:dd:ef:7d:1d:9e:78:06:d5:28:cb:
b7:b8:21:d4:78:dc:d8:c4:a4:cc:31:f7:6e:41:51:b2:67:df:
4d:de:f5:50:b8:6e:3c:16:f3:36:1c:e3:3d:5c:85:3e:cd:61:
4a:5a:fe:92:55:0e:3b:42:f1:00:e0:55:fb:15:cd:c0:a4:d7:
c7:d2:f9:a3:bd:d1:9e:5d:6d:6d:1c:51:47:58:b6:36:09:76:
3b:e2:0e:73:a4:f0:01:1b:ad:69:60:24:e9:77:c5:1c:f2:76:
8e:c0:c3:b3:00:3f:fb:e8:ae:04:a3:1c:44:a5:8a:d1:4a:4d:
10:f7:fb:68:26:83:2b:dd:f9:f8:19:2b:d0:11:56:c9:8b:eb:
dc:07:12:93:7a:eb:89:b1:fa:77:bb:c6:59:69:e2:d6:f1:8a:
1c:21:f4:36:33:d7:91:e7:80:f1:6c:b2:2f:e8:2a:99:7f:93:
dd:e2:25:02:56:6f:6a:00:84:9c:02:3b:5f:99:83:d0:19:64:
7a:5c:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:39 2025 by rpki-client