Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: 5trn6wvdctbLxioHz8x4yaWgI8jxw8y+1oNsSxasP/I=
Subject key identifier: 31:30:C4:31:C5:57:59:18:C3:D2:B2:00:F5:94:B3:E5:8C:92:6E:43
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 01974A7A79702C2AD5B0C188238B24B8C840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 097E
Signing time: Sat 07 Jun 2025 13:00:29 +0000
Manifest this update: Sat 07 Jun 2025 13:00:29 +0000
Manifest next update: Sun 08 Jun 2025 13:00:29 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: zCcPr0l8Q+ziT88cMJOt+43ecJAov7CnLauniAdsHM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:79:70:2c:2a:d5:b0:c1:88:23:8b:24:b8:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Jun 7 13:00:29 2025 GMT
Not After : Jun 8 13:00:29 2025 GMT
Subject: CN=3130c431c5575918c3d2b200f594b3e58c926e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:61:c9:dc:47:89:df:b1:21:ef:e9:db:ba:
24:8e:45:06:64:27:f8:fb:c0:d1:5d:c7:2f:b7:7a:
66:52:80:23:43:37:fa:45:df:ae:64:7e:d4:9f:31:
82:27:df:5b:a8:50:78:5f:3c:65:9f:89:33:ad:8f:
e2:46:e8:70:02:09:36:36:ed:0f:68:e2:83:ff:31:
b1:32:25:21:21:92:fd:26:ee:6d:26:c3:5d:e8:22:
9d:03:e0:fb:74:e6:db:e6:66:3d:41:98:83:1c:ae:
9b:1d:ed:df:1b:c0:b1:25:f7:bb:bc:15:05:4c:61:
c5:b6:85:a7:2b:df:dd:c2:69:6d:33:3e:ed:2e:bb:
d0:5a:09:46:b0:08:a7:06:96:22:f6:e9:bc:06:00:
b1:b8:af:c4:e6:ad:d8:8d:79:21:6d:1e:ff:63:df:
d4:6a:70:fe:bd:57:be:01:ee:aa:90:04:4e:1e:9d:
16:1d:aa:9d:8f:0b:9c:c5:69:ef:a1:79:d7:10:7b:
86:ab:a5:a7:40:7f:77:ec:29:4c:82:6b:a8:af:f8:
53:d3:be:e8:c4:ea:34:89:c4:bb:ca:19:71:00:78:
54:94:2c:b3:9f:1d:eb:2b:25:35:da:d3:6d:41:03:
11:5a:a1:dc:66:ab:76:82:77:88:0a:21:cd:1c:21:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:C4:31:C5:57:59:18:C3:D2:B2:00:F5:94:B3:E5:8C:92:6E:43
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:d7:e2:3f:b0:30:97:1b:c2:b1:a1:c0:68:da:96:2c:88:
e5:cc:40:66:dd:dd:97:f9:16:40:3f:1a:9b:79:46:bd:0a:fe:
fd:66:da:12:0e:a5:67:9b:d1:93:d4:18:49:84:14:cf:d3:d9:
ee:9f:b6:a5:a6:88:44:87:82:61:a3:54:7b:af:88:8b:ec:4d:
da:51:4c:36:54:72:61:45:02:ba:42:ba:bd:b5:ba:6d:7e:81:
37:ae:14:ce:aa:1a:6b:c4:af:cf:ab:3b:ae:5a:a9:f1:4e:c2:
d0:6c:10:86:7a:3e:c3:7b:6b:15:26:7f:c9:1d:f2:3c:28:d6:
d4:bd:16:63:9b:97:09:60:12:c5:3e:37:e9:82:1c:d7:19:9c:
a8:8b:d5:f6:e0:58:3a:12:8d:17:78:5d:13:02:1f:32:ad:2e:
05:ae:5c:01:71:f6:22:85:46:11:a1:c6:d9:f6:95:0f:67:b2:
63:cb:e8:ec:69:7f:93:c6:df:60:2f:66:2d:ad:19:d5:97:f4:
b3:64:00:f7:ef:ae:40:e6:44:61:7a:4d:ed:f0:d2:77:91:82:
5b:20:e6:3f:55:e6:79:93:9b:10:c1:ab:14:cd:83:57:c4:d8:
62:4b:f0:41:5f:eb:42:f0:ad:92:32:ab:c9:da:de:10:cc:d5:
eb:96:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:41 2025 by rpki-client