Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: 08pd2pKQyMUtBultEa/Ml2NgyKRyD80VPYDvl+B0eJU=
Subject key identifier: 7B:0B:42:70:ED:07:2E:F3:37:05:DE:C4:B4:49:DE:0D:FC:F6:27:A5
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019887A05705FA9462169F2EE6B83525CF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0558
Signing time: Fri 08 Aug 2025 03:01:28 +0000
Manifest this update: Fri 08 Aug 2025 03:01:28 +0000
Manifest next update: Sat 09 Aug 2025 03:01:28 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: uCsVUVugZ0oBOjyZBYcpWeq/KL4ySdQtJ7gO5jsjVDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:57:05:fa:94:62:16:9f:2e:e6:b8:35:25:cf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Aug 8 03:01:28 2025 GMT
Not After : Aug 9 03:01:28 2025 GMT
Subject: CN=7b0b4270ed072ef33705dec4b449de0dfcf627a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:80:50:be:b5:c2:d4:6f:ae:33:fc:7b:0d:
5c:a0:e3:78:43:71:af:7a:9a:be:f2:46:7f:dd:31:
16:2c:d9:8e:85:4b:ed:cf:b6:f1:bd:b0:9f:04:67:
af:c6:d4:00:b3:63:9b:89:df:9a:77:73:e4:a6:1c:
fa:04:bb:1d:ee:b0:98:90:b6:6e:7e:52:2e:b9:46:
c7:23:9c:0a:78:45:c0:5e:5b:70:8b:fe:55:e1:e6:
86:4c:73:79:de:39:7e:e6:8b:a9:7d:76:57:3c:ff:
c5:23:92:4a:7c:45:e1:9f:9e:70:35:1c:c1:ca:40:
b3:3e:de:19:9d:dc:3b:d1:2c:3d:9f:b7:37:e7:9e:
91:e9:d3:a8:81:9c:6b:7b:84:fe:01:27:a0:55:29:
14:8f:4b:cc:1a:44:fb:31:e0:e3:e5:29:fc:53:df:
52:0b:98:c0:ef:7a:47:d2:7a:b1:10:d1:2a:15:d5:
9c:ca:68:60:97:10:5e:f1:7e:04:ac:9a:a6:23:2c:
14:34:c1:a4:18:ce:7c:8f:51:db:16:ca:9d:64:3d:
11:32:75:ee:4f:bc:34:4e:f3:e0:4b:b0:91:71:d2:
35:6b:5f:4e:80:7b:73:84:5a:de:c9:1a:52:01:71:
ca:9a:7e:67:83:4e:11:ce:78:d4:ec:92:df:50:ef:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:42:70:ED:07:2E:F3:37:05:DE:C4:B4:49:DE:0D:FC:F6:27:A5
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:47:0c:a1:15:84:a8:a0:5c:3d:e4:59:1d:b3:50:9e:77:66:
eb:ac:bc:05:fa:64:0c:7f:72:43:64:cf:44:61:7a:4c:f7:3f:
47:e2:5a:fb:fa:d5:b8:a6:ec:50:1a:54:70:c2:e4:64:69:87:
b9:ff:b9:dd:2e:21:0f:18:1e:da:b3:89:23:1f:49:24:ca:7a:
5d:f6:fb:1e:06:fc:c0:70:78:43:ee:82:ce:2d:9e:1c:44:10:
70:52:96:56:d4:f9:c2:d7:9a:15:03:96:92:4b:0f:b9:67:f2:
44:56:54:75:37:24:e1:5f:2f:89:ea:ca:90:a8:18:5d:dc:10:
d7:c6:e2:5e:98:4c:75:47:eb:02:5f:4d:44:f8:e5:29:8b:f9:
6c:0b:89:1a:78:d5:4a:10:e2:1a:07:00:b3:10:50:5e:fb:2b:
21:01:16:b5:6e:18:64:2b:50:d9:58:e6:61:9e:5b:74:9b:3a:
6b:5c:f1:0f:a1:46:bb:5c:99:8c:37:d0:19:af:86:e3:41:81:
e3:c5:40:08:d6:d3:94:c7:99:a9:0b:71:33:8e:6d:d3:d1:8b:
28:65:48:2c:08:36:02:6a:46:32:27:1e:c1:25:b3:82:ed:0c:
97:76:2a:5f:cc:eb:3b:1b:35:1b:b8:9c:44:2d:62:60:bc:1a:
0c:bc:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:16 2025 by rpki-client