Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: MPfAopFGhjSYEI3MG6i+ja9Xuiq5tdr6oFsYfbHGevA=
Subject key identifier: FC:2C:AD:8A:F4:12:B3:A7:7C:6D:E5:C5:0F:B6:FB:C5:B2:DD:EB:E9
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 01974D0DDB1E84AE7A9B71A3B681CE435891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 03C3
Signing time: Sun 08 Jun 2025 01:00:42 +0000
Manifest this update: Sun 08 Jun 2025 01:00:42 +0000
Manifest next update: Mon 09 Jun 2025 01:00:42 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: NUQW0WCYIn8k2uJ9qNt1UD+Fb82KUg71kxQjwBoPxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:db:1e:84:ae:7a:9b:71:a3:b6:81:ce:43:58:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Jun 8 01:00:42 2025 GMT
Not After : Jun 9 01:00:42 2025 GMT
Subject: CN=fc2cad8af412b3a77c6de5c50fb6fbc5b2ddebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:9f:b8:08:2b:eb:f7:7e:26:e4:c7:b5:1d:
10:68:e0:45:4c:38:cb:00:b7:d8:bb:7f:73:7d:ab:
ff:b5:8b:ee:c9:9a:cd:30:65:ec:62:ac:a0:6b:e7:
9e:d0:cd:d8:5d:6c:37:7f:3c:34:ee:56:52:e4:4c:
07:ad:af:bc:27:99:2e:48:f8:59:4b:3b:19:5f:77:
a4:35:3b:1f:49:0a:57:1d:3a:6d:30:e6:e9:71:9c:
36:a6:3a:a0:82:64:8b:0c:68:f7:a1:e7:8d:cf:c3:
e9:1b:72:b9:a7:da:11:b6:9c:67:26:b0:ce:54:93:
86:1e:d2:6c:7a:b1:31:07:3d:ea:60:6c:84:d1:6f:
7e:3b:2c:a7:bb:cf:19:65:9f:ef:7a:69:fd:ba:81:
c9:4a:e2:0d:c2:2a:ee:d2:d7:19:d9:3a:0e:0c:9e:
ea:21:6c:f3:82:64:f4:2e:99:ea:f8:d4:5c:6e:3c:
44:f2:8f:c7:81:ef:d2:24:0f:c0:69:d0:f0:59:ba:
69:a1:92:4e:15:ab:b6:6e:2c:df:2f:a3:a9:d7:66:
ba:aa:bc:65:f1:f0:4c:56:ce:46:4b:3c:be:a5:6a:
9f:9e:dd:55:f0:2e:f2:d0:9e:a2:4d:ae:aa:df:69:
ba:4e:d2:ba:d5:ef:d2:9b:a5:2a:94:af:cc:9f:f6:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2C:AD:8A:F4:12:B3:A7:7C:6D:E5:C5:0F:B6:FB:C5:B2:DD:EB:E9
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b7:fe:07:a7:f5:59:a9:32:5e:73:4c:24:6c:d1:ec:43:cc:
c4:7f:0f:87:c7:f1:cc:d1:54:2f:43:4b:d5:e9:d1:ac:cd:59:
63:39:a9:db:39:26:8a:5e:42:d6:cb:ac:0b:cf:55:65:73:bd:
96:38:7c:35:86:8a:e9:b5:2f:69:f9:8c:7e:41:cc:e8:82:29:
98:57:c4:49:b1:d3:ab:e3:80:71:d2:11:71:97:b4:f2:b3:12:
b7:e8:e6:9b:be:28:4e:35:8b:04:71:04:14:b6:df:fa:85:98:
16:5c:e5:e2:9c:ea:e9:7e:3d:4f:71:4d:94:d1:7f:dc:ff:f7:
f0:71:5b:40:7b:22:ca:b0:1b:30:1f:a3:d4:80:92:5a:66:0a:
fb:d1:eb:5e:91:2f:34:a9:ff:f4:2b:91:a6:df:78:ac:8d:d2:
14:cd:b8:b7:df:6b:1c:f9:00:e5:24:2c:e9:b1:0c:59:9e:44:
be:94:25:50:61:c7:d0:e8:c1:22:50:ad:7d:9c:fb:04:ea:7c:
62:53:77:67:63:31:93:b5:ab:ff:6c:b6:0a:5b:d9:dd:22:ad:
80:f2:3a:44:25:f0:44:41:ec:c4:81:58:99:76:78:3c:57:d3:
ed:15:0f:7b:4f:79:52:f8:6b:58:31:85:aa:62:13:52:51:34:
03:34:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:33 2025 by rpki-client