Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier: q0eWA3Fk+ppmiouBUAPg1HW2OI38a//THxRLKkbzFrw=
Subject key identifier: 23:17:EA:0F:A0:E1:CA:83:66:BB:F4:2C:7F:69:5B:3E:7F:BE:CD:A7
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer: /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial: 019916BF7B72372DD157B95042D46DA6B9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number: 02BA
Signing time: Thu 04 Sep 2025 22:01:11 +0000
Manifest this update: Thu 04 Sep 2025 22:01:11 +0000
Manifest next update: Fri 05 Sep 2025 22:01:11 +0000
Files and hashes: 1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: QTULQepQfmK6oQ5TxIFxI6KTO2vYF6qI/HUnFyGsmxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:7b:72:37:2d:d1:57:b9:50:42:d4:6d:a6:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Validity
Not Before: Sep 4 22:01:11 2025 GMT
Not After : Sep 5 22:01:11 2025 GMT
Subject: CN=2317ea0fa0e1ca8366bbf42c7f695b3e7fbecda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:7b:5c:d6:42:bc:e8:a3:a4:6f:60:95:91:
ef:a0:6a:8c:8b:4e:81:d8:98:98:0e:8d:d6:65:0e:
2e:51:54:9f:ac:92:27:6c:bf:71:6a:80:16:ef:73:
e9:2a:22:40:4c:7e:48:42:d4:e2:85:95:63:37:40:
c6:9f:ff:3c:12:6e:a0:84:ae:0f:46:24:0c:bd:30:
88:c5:57:69:02:35:fd:ae:cf:57:cd:1b:5d:79:1a:
22:f2:17:83:c2:13:3a:d5:19:9d:f9:fa:9c:f7:d0:
e4:00:44:1a:3c:2a:45:43:56:48:44:10:2b:76:12:
d7:b0:24:66:51:04:08:58:6d:e2:57:61:cf:e5:47:
1f:4d:c4:ce:f2:bd:d8:48:1f:ca:42:40:57:0b:e7:
8b:41:13:47:0b:ea:4f:0c:f5:ec:57:ed:65:36:e3:
a7:58:40:4a:4c:ec:5c:a0:61:27:9e:b6:3b:7e:50:
b1:c3:7c:4d:79:40:77:4c:fa:ae:81:d6:53:da:ed:
64:55:7a:bb:7d:77:a6:73:7d:01:90:5a:09:df:4a:
66:ed:96:52:ec:06:2d:56:07:35:ca:5c:1f:b6:c7:
c3:b2:9c:df:12:2e:ea:48:be:da:ec:b9:9d:40:f4:
78:4c:6e:ad:fa:43:2c:ae:cb:14:40:cf:f9:71:e0:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:EA:0F:A0:E1:CA:83:66:BB:F4:2C:7F:69:5B:3E:7F:BE:CD:A7
X509v3 Authority Key Identifier:
keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f6:09:17:fd:61:99:13:d7:22:76:fe:11:05:c6:25:16:b3:
7a:37:9b:b8:07:3a:5b:da:9e:3d:0a:94:47:e4:80:88:f7:86:
2f:b1:e2:5e:5a:3e:07:b2:ee:20:38:46:31:a1:06:b7:6a:2c:
fc:0c:05:54:fb:8b:84:b5:8e:d3:e4:ee:04:a0:1f:17:42:8f:
ed:e2:44:c6:98:75:78:94:ac:96:49:92:39:06:af:f1:d3:3a:
59:43:51:62:e7:f6:bc:6d:c4:c5:b9:c2:cf:07:d3:90:6a:e9:
0c:ae:eb:58:c2:b7:e6:8c:f9:26:53:ab:48:e3:e6:1c:fc:59:
ab:4d:0c:22:4a:63:66:2d:c2:ac:a6:c7:9f:cb:45:9e:e0:b6:
87:d6:f3:c7:68:a2:b2:6b:96:2d:38:d0:97:2f:c1:97:01:32:
ea:96:e0:84:76:57:aa:54:23:86:d4:74:c4:08:ac:52:e1:db:
a7:ca:1e:10:9e:8f:4c:3b:c5:9c:49:e3:8e:a8:6d:c1:c5:fd:
bf:0d:9d:3f:11:48:48:31:e6:d5:fd:b4:65:80:4d:ca:f8:3b:
35:9e:e1:04:11:4e:53:74:aa:56:83:e6:ed:d5:6e:03:d4:4b:
c2:5b:db:cb:37:ef:d1:34:56:a4:f3:d0:34:a0:c6:87:cb:a2:
8c:bf:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:31 2025 by rpki-client