Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier: L211xNv/7MigJgGdhQF92+Do2sZ7gzlbiNwFPEDz4SM=
Subject key identifier: AA:D4:11:9E:F8:98:97:66:3C:C7:FB:17:6C:36:C2:C9:02:E0:F1:54
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial: 019768851AA07928DA6D976EE41AF663AF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number: 02A4
Signing time: Fri 13 Jun 2025 09:00:42 +0000
Manifest this update: Fri 13 Jun 2025 09:00:42 +0000
Manifest next update: Sat 14 Jun 2025 09:00:42 +0000
Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: Mi5i+pukKgt1hL8lQCCik6DYWcMqp6VretMijI6zw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:1a:a0:79:28:da:6d:97:6e:e4:1a:f6:63:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
Validity
Not Before: Jun 13 09:00:42 2025 GMT
Not After : Jun 14 09:00:42 2025 GMT
Subject: CN=aad4119ef89897663cc7fb176c36c2c902e0f154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:83:b2:ec:58:6c:5c:ae:1c:49:46:1b:e8:
07:fd:e2:8d:a5:5f:ee:24:0e:a3:f0:c5:f5:9a:2b:
cc:ea:f7:d7:52:b9:b1:bb:fd:ea:18:f1:0a:19:39:
3b:47:2e:bb:6f:60:c3:1a:83:64:b5:fb:6c:33:7f:
1a:7d:d6:2b:da:a1:90:fb:e7:49:2e:f4:60:3d:f3:
ad:67:78:d4:76:17:66:3c:3a:1e:e7:9c:56:5f:21:
92:9e:29:b7:57:24:2d:b7:e5:67:eb:25:17:17:51:
3c:0f:70:2f:4f:3f:29:0b:b3:4b:29:d5:9e:47:c8:
21:2e:ae:69:e9:e4:24:10:d4:15:b9:4d:08:01:7b:
6e:c5:5f:fa:cd:cd:2b:17:ac:21:a3:62:9f:43:5d:
24:75:6c:c2:22:3b:35:47:d2:8d:f8:bf:3d:9a:72:
8b:25:84:24:a7:dc:ec:19:35:f2:0d:85:29:d2:66:
e3:c8:df:a5:e2:d3:15:30:a8:70:16:18:36:37:17:
6e:8f:bb:c6:4c:2b:ad:d7:5e:9e:89:1b:7a:b3:5c:
95:49:bf:a8:2b:6b:c1:0c:3b:95:fd:02:09:20:35:
51:03:13:60:60:27:b7:b6:88:f3:3d:17:da:a0:36:
45:8e:e1:44:cb:3a:fe:66:e5:a1:ab:5d:4f:96:e0:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:11:9E:F8:98:97:66:3C:C7:FB:17:6C:36:C2:C9:02:E0:F1:54
X509v3 Authority Key Identifier:
keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:0b:2e:ad:72:16:6a:36:51:04:ce:25:5c:91:65:b1:96:
19:dd:f2:45:bc:1d:55:e8:6a:7d:6e:7d:01:74:2b:d3:da:76:
52:44:58:e8:93:36:38:d3:a5:13:69:22:81:7a:f0:c4:13:dd:
a3:3e:56:05:d8:66:64:4c:8f:ed:b1:32:15:19:b4:5b:35:6e:
33:5c:05:5a:8b:fd:23:6a:0e:18:eb:43:d3:5f:4c:c4:95:b4:
cb:c9:fc:bc:08:9b:f0:1f:1e:5e:dd:1e:34:32:3d:56:31:20:
6c:d3:a6:70:4f:47:b5:57:e5:f1:55:94:cb:2a:be:9d:07:1f:
72:4d:bf:32:a7:69:2b:d6:e1:3b:1f:43:44:64:1f:42:be:8f:
64:f7:ae:9c:57:75:a2:da:a5:e0:8a:40:6a:97:ed:f2:b0:10:
5e:16:49:d0:3d:a8:e5:7b:27:e8:77:a4:cb:bc:c4:8c:76:19:
a8:5b:81:c6:c0:9a:d4:52:f2:85:d1:e8:09:2a:29:f1:66:eb:
5e:04:0c:e4:45:c6:78:46:39:4a:9f:b8:be:ac:f7:1d:20:3c:
3a:93:c3:b1:de:36:0e:4c:f8:ee:e8:ef:3e:de:39:20:52:56:
73:6c:97:c3:27:db:b9:f9:95:10:22:cd:84:30:1b:dd:d5:da:
b3:0a:9e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:57 2025 by rpki-client