Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
File: h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json)
Hash identifier: BLnHyuACJzIRPVXId8DG7TNi4NUZw2W8RXPSR1l6I04=
Subject key identifier: 66:31:F5:50:1D:0A:C4:88:8F:9C:EE:18:87:77:5B:AD:3E:68:92:7E
Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
Certificate issuer: /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Certificate serial: 01974AE8DEAE30019F69FA9670103409DE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
Manifest number: 0169
Signing time: Sat 07 Jun 2025 15:01:04 +0000
Manifest this update: Sat 07 Jun 2025 15:01:04 +0000
Manifest next update: Sun 08 Jun 2025 15:01:04 +0000
Files and hashes: 1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: 8brMRcrf2+WBlkaQFX2HC3igKdwrhULwPWpbyI8L5gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:de:ae:30:01:9f:69:fa:96:70:10:34:09:de:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Validity
Not Before: Jun 7 15:01:04 2025 GMT
Not After : Jun 8 15:01:04 2025 GMT
Subject: CN=6631f5501d0ac4888f9cee1887775bad3e68927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:42:10:0f:4c:d5:39:73:67:73:d3:6f:09:
eb:93:ba:4e:61:90:0f:1e:07:3f:70:7c:6f:3b:16:
a6:78:42:93:f3:da:4e:0f:d3:e0:fd:7b:2a:ee:f6:
17:84:92:b5:4d:4f:ee:1f:b8:4f:44:e7:a5:9d:c9:
e6:5e:b0:00:d2:3e:65:f1:e5:c5:be:35:20:fb:58:
49:dc:b6:b6:64:00:fe:dd:70:f0:a5:4b:e6:2f:19:
14:3a:96:b8:93:06:cc:97:b5:01:d1:f3:22:eb:bf:
d2:e1:97:04:2d:b1:46:c5:9c:4b:bb:80:05:ee:74:
dc:84:d4:c3:17:5c:b9:c1:58:1b:ff:80:cb:14:1a:
e2:ef:72:10:85:4b:5b:db:5c:52:a1:7b:38:eb:f2:
ab:61:81:b2:c7:02:e8:da:b2:c9:45:a2:22:d7:f6:
ed:1f:db:72:34:36:bb:d4:e8:04:04:38:46:15:aa:
92:e5:c5:60:d4:3e:d0:14:c4:e6:22:81:13:f4:06:
17:d7:82:98:1b:bf:e2:ef:a7:4b:ae:8d:e4:c5:44:
74:a4:2d:b4:b6:0d:a8:80:e7:64:af:19:ee:bc:41:
67:95:8a:eb:d8:1c:3b:f5:6e:59:73:44:83:10:6f:
e1:a3:95:d1:98:17:2a:ba:16:4e:21:9b:59:a8:bc:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:31:F5:50:1D:0A:C4:88:8F:9C:EE:18:87:77:5B:AD:3E:68:92:7E
X509v3 Authority Key Identifier:
keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:81:da:c1:de:52:e6:24:6d:aa:b1:48:b7:23:8d:d3:4e:1a:
d2:3a:5d:5f:5d:3c:7f:6a:11:c3:c9:90:27:87:94:a1:b0:89:
38:a3:22:6d:c2:fc:3c:04:e1:8d:01:3a:4f:96:6b:41:17:a7:
8e:c2:fd:e6:4b:2a:c9:76:c7:49:53:e1:9f:c3:3a:7e:1e:14:
c0:5a:57:01:b7:36:0b:54:c2:49:61:5f:4f:04:5b:57:e5:28:
62:52:ea:fe:4e:6b:6a:e8:95:14:6a:6f:ca:aa:76:11:93:18:
bb:ae:4b:de:0a:c3:85:95:53:af:53:22:d9:e6:d8:c0:d0:cc:
40:35:47:29:7d:56:ff:df:ea:17:c3:56:55:ef:c3:fe:f0:0f:
fa:3d:b5:af:c1:0a:65:1e:19:75:88:e6:bc:fe:26:ae:53:ca:
66:88:82:59:09:18:5f:8f:77:6c:48:0e:47:d9:3a:29:d0:41:
e4:bf:51:4f:f8:4b:78:a4:94:19:ce:66:e3:f9:70:3e:20:0b:
62:6d:bc:a7:ec:5f:b2:a5:54:0c:c1:b5:f5:b5:2a:dc:b2:97:
bf:4f:8f:40:93:36:b1:0c:bc:5b:db:98:08:ea:38:3a:fc:92:
dc:61:14:25:dd:a5:32:65:cf:da:d1:58:ce:e9:6d:08:ee:3c:
8b:da:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:09:49 2025 by rpki-client