Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: va6b8svnmX2PxUIF5CdXNmYJJTBFV3olerLtQDCMx54=
Subject key identifier: B2:B6:75:83:E6:DF:F5:22:02:C8:AC:2E:3B:2C:9C:01:96:EE:35:31
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 0197488C670A72085FC0B7730BD77F5C285E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 0842
Signing time: Sat 07 Jun 2025 04:00:50 +0000
Manifest this update: Sat 07 Jun 2025 04:00:50 +0000
Manifest next update: Sun 08 Jun 2025 04:00:50 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: eoLlWESQVXgnV74qeyUIutn5gDm71VUzERMCBD4jxwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:67:0a:72:08:5f:c0:b7:73:0b:d7:7f:5c:28:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Jun 7 04:00:50 2025 GMT
Not After : Jun 8 04:00:50 2025 GMT
Subject: CN=b2b67583e6dff52202c8ac2e3b2c9c0196ee3531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:9a:c5:bd:6f:27:c4:63:42:91:8f:bd:d7:
6d:e4:83:ab:c9:c0:0b:21:91:d8:da:74:b0:8d:b4:
83:c0:73:e1:db:19:0b:79:af:08:a4:a1:8a:07:20:
27:b1:27:61:31:77:43:49:70:d4:54:1e:04:f5:81:
50:5d:41:85:e3:31:58:da:ed:9f:ed:49:54:23:a2:
d6:22:df:3e:e2:50:f6:db:39:c3:9e:d4:db:d0:ac:
3f:00:bb:ef:e8:73:e0:ff:9b:8f:b1:f7:a1:80:27:
ab:d5:35:60:48:32:ef:e1:96:7a:52:89:b2:49:58:
0b:5b:e9:99:81:64:e9:2a:4e:d9:bd:c0:39:39:d1:
e5:f9:09:95:15:f7:82:bb:c1:9e:ed:c0:f7:91:c3:
51:c6:be:56:cc:92:9f:e2:bf:ae:da:60:0f:40:4e:
76:14:f3:08:b8:c5:29:ad:a4:7c:98:ea:32:39:f4:
72:d7:02:4d:c2:6c:56:38:11:bc:d4:3e:42:ad:43:
22:77:1b:22:e1:a3:9a:11:3e:ce:66:9e:98:bb:37:
7e:82:2d:56:0c:0a:c4:d0:b0:78:eb:54:d9:22:ed:
e6:d1:ca:f6:67:91:8b:49:34:a8:05:7d:a7:ad:c3:
10:24:05:38:22:4e:ec:dc:81:7c:d3:87:72:df:46:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:75:83:E6:DF:F5:22:02:C8:AC:2E:3B:2C:9C:01:96:EE:35:31
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b1:79:80:58:68:ba:7f:1c:eb:74:94:35:6d:96:9c:79:86:
aa:6a:b3:e3:0a:00:f5:4d:49:99:c4:16:60:8a:d3:93:d9:07:
bd:4f:20:d6:ba:ae:e2:a2:b0:dc:4e:45:df:2d:8d:75:b7:7f:
09:93:e2:01:ee:42:bd:50:08:c8:0e:c7:49:4c:45:19:f8:ef:
a2:50:69:6b:43:74:f5:04:f3:ce:7f:1f:18:02:9d:0f:a5:b9:
8a:97:f3:01:6c:9a:00:9f:07:a4:e4:b4:d3:73:4e:60:b0:84:
bf:4f:5d:49:a9:f6:f0:ec:0b:c5:10:c8:a4:ef:9f:77:0e:94:
ab:84:30:5b:22:80:d2:96:ea:27:ba:c1:f1:06:80:63:59:8a:
c6:1b:2a:ac:d7:9d:8d:82:3c:f7:fb:11:4f:06:d1:0a:47:e2:
ec:d6:b4:73:7b:c9:8a:6f:4b:34:0a:76:fd:21:e9:3a:43:f7:
f3:6c:86:18:cd:26:8c:6f:e8:63:4d:01:9f:01:f3:e7:d2:41:
9d:c8:fd:af:4c:9b:95:8c:7e:39:ce:55:63:ad:d6:bc:01:58:
ca:5e:00:b1:db:de:0c:a5:a7:8d:e2:c9:6e:e3:10:2c:68:b9:
93:a1:9e:cd:ff:2b:37:2f:23:77:f6:d9:e7:57:4c:40:e8:3e:
6a:d9:97:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:41 2025 by rpki-client