Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json)
Hash identifier: H/U1umlknZtex71k5pBtexydsK8gD7DZygEE3+zT3sE=
Subject key identifier: 22:B5:35:14:D7:24:B6:BD:CB:C8:23:97:7C:A2:5B:F4:41:31:4A:49
Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Certificate serial: 01975BDC6013C7A6FA2DCBFEEF4F409EA432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
Manifest number: 05EE
Signing time: Tue 10 Jun 2025 22:00:58 +0000
Manifest this update: Tue 10 Jun 2025 22:00:58 +0000
Manifest next update: Wed 11 Jun 2025 22:00:58 +0000
Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: k5gnKlk3CIKYphvz0FRTvyxDkCiAlFxNMqszuih0PaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:60:13:c7:a6:fa:2d:cb:fe:ef:4f:40:9e:a4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Validity
Not Before: Jun 10 22:00:58 2025 GMT
Not After : Jun 11 22:00:58 2025 GMT
Subject: CN=22b53514d724b6bdcbc823977ca25bf441314a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:94:da:22:6e:32:9e:60:5f:13:e4:cf:38:
9d:2e:8a:49:03:c8:45:7e:20:3e:fa:4f:a7:7c:04:
2e:9b:3e:1d:1f:5b:80:1e:15:c9:12:75:d0:1d:0e:
72:2c:b9:0d:98:5d:0c:ed:64:c7:48:a2:43:38:be:
44:41:77:11:67:4a:3d:51:ef:79:4d:66:c3:fb:14:
f6:1a:11:6a:ca:c6:cf:04:3f:d1:e7:83:83:40:d1:
84:99:77:de:1b:b1:b3:3f:69:25:62:c3:ea:aa:24:
c5:95:02:25:22:5b:67:55:d9:ec:39:42:c6:2c:53:
ea:72:c6:28:ae:ce:b2:1a:1f:4e:f7:18:2a:57:be:
bf:18:a4:0d:dc:40:9b:0f:cf:de:08:86:f7:64:6c:
7a:fc:b4:bf:30:aa:a9:c8:4f:7d:46:12:24:f8:73:
d4:88:d4:bd:08:ec:a0:b6:d5:a2:f3:ed:e8:d1:13:
ec:d4:c8:a1:9b:ac:73:0c:f7:72:6b:2f:b5:e1:4f:
54:2b:e7:7d:d6:4a:78:5b:f1:eb:03:a5:51:0c:0a:
38:76:23:53:26:f9:5d:9c:37:76:4d:ec:93:b3:b3:
f6:6b:14:27:28:98:05:c4:38:b7:aa:39:97:5f:6d:
85:1a:b0:56:4a:c4:59:a4:e6:ab:24:94:92:7a:b0:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B5:35:14:D7:24:B6:BD:CB:C8:23:97:7C:A2:5B:F4:41:31:4A:49
X509v3 Authority Key Identifier:
keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:91:10:0b:f6:ac:57:c9:90:ca:bf:f7:3f:7d:0a:a8:e7:17:
34:2d:91:71:2e:aa:ad:a6:44:f4:a7:6c:ee:c4:c2:cf:ac:35:
13:e2:80:da:7c:70:fc:57:91:c9:98:27:e9:ca:69:20:b9:71:
fc:40:87:72:8c:63:33:ca:d1:5b:31:db:d3:a1:12:d0:f5:bc:
57:b7:c7:1e:c5:e9:0a:ba:ff:0e:3d:9b:5a:93:be:24:02:20:
13:a0:b0:cf:03:ba:8e:76:4c:99:8a:ed:89:14:3b:aa:d5:63:
21:e2:9a:54:23:9d:36:97:ac:31:50:d8:55:fe:93:b6:45:76:
84:46:f2:04:32:90:fe:d2:ee:a0:c8:3d:fa:c5:93:63:9a:ab:
d4:38:02:6f:5c:ec:04:7c:38:cb:40:56:2b:b2:8d:8f:01:68:
48:04:80:12:99:7a:f8:51:89:8f:3a:9b:0f:99:bf:a0:94:f3:
51:2b:d7:c8:4b:38:ce:ba:a3:1a:3b:96:45:99:af:47:7e:db:
f2:b7:db:1d:fb:2d:ce:b0:24:e2:b4:23:34:fa:11:40:2e:84:
5e:e7:de:81:00:58:62:32:ee:8a:83:5e:48:a8:16:97:93:7a:
e2:7c:a1:cb:f2:ef:30:77:05:27:63:7d:68:77:89:63:17:36:
ee:63:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:57:55 2025 by rpki-client