Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: xPwUjJpdO24YLnGXKsvRAk984NHG5k2QtMXWgwtP0Po=
Subject key identifier: 35:74:99:DE:FC:B9:D7:8E:BE:A7:59:87:22:54:20:2B:BB:1E:76:A4
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 0197850EEC5269B2FB8A99DBADD9C38B6E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 0508
Signing time: Wed 18 Jun 2025 22:00:37 +0000
Manifest this update: Wed 18 Jun 2025 22:00:37 +0000
Manifest next update: Thu 19 Jun 2025 22:00:37 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: AIDpiv2jbh7AMbNwGr+4cd/7ZdD6prRKXWdAZFjT834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:0e:ec:52:69:b2:fb:8a:99:db:ad:d9:c3:8b:6e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Jun 18 22:00:37 2025 GMT
Not After : Jun 19 22:00:37 2025 GMT
Subject: CN=357499defcb9d78ebea759872254202bbb1e76a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:61:7d:28:cd:6a:20:c3:bc:01:c5:99:dc:
b1:d8:88:35:d3:1d:80:b1:03:48:dc:cd:0e:c8:48:
6f:27:4c:ed:0b:e4:ad:fe:c4:1a:9e:bb:d0:e5:fe:
4b:9d:ef:61:29:a9:5f:92:4c:05:c6:0b:8e:a2:ab:
2d:1e:3d:fb:25:10:ed:c3:2f:75:39:61:2e:fb:d5:
69:a7:ee:8d:d6:fa:63:aa:ad:32:a1:70:f5:8b:a3:
85:bf:52:34:12:8f:41:eb:0d:cf:1c:de:d6:29:68:
2d:62:b5:a2:e2:35:49:15:e4:27:fe:54:65:59:8e:
4c:8e:4c:4c:ab:d1:39:56:55:59:b8:0d:2d:a4:c1:
27:3d:4b:44:d2:91:ca:54:a8:57:44:44:11:b9:59:
1f:6c:1b:fb:30:e3:0b:ba:d0:00:bd:98:9d:fa:7c:
a1:c1:4e:74:7a:70:42:99:e0:6d:b8:07:83:de:aa:
90:e5:a2:e2:7c:26:04:ec:de:db:06:e5:56:a8:68:
52:cc:e3:cc:48:1c:3c:49:80:47:66:da:76:f9:bc:
8d:19:1b:27:8d:25:3e:3c:24:4b:46:02:d1:ee:7e:
9c:07:68:70:44:a3:aa:47:eb:08:18:ba:33:c6:e9:
3a:ad:ab:55:ed:9b:8f:5b:10:ec:c5:3a:ae:7e:71:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:74:99:DE:FC:B9:D7:8E:BE:A7:59:87:22:54:20:2B:BB:1E:76:A4
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:05:40:f0:a1:ad:4e:89:e2:b5:8c:d5:37:7c:ae:59:14:92:
60:6b:83:5c:2b:88:93:f6:56:54:3b:f5:e1:13:d3:7c:4d:5d:
07:cf:69:fb:60:20:3c:fb:1e:d8:f0:f7:80:a5:8a:59:84:f5:
e9:6d:98:99:e9:c3:7a:03:95:bf:51:40:ba:34:4b:e9:6b:14:
96:55:c5:a7:32:6b:c1:91:13:ad:ad:d0:fb:f0:b5:0e:14:2e:
d0:0d:50:72:e1:6b:56:c0:2e:c6:ce:90:4e:15:1e:bf:a4:82:
49:f9:5c:6f:97:a3:e7:b5:83:f9:ee:9c:dd:31:a1:8a:70:ed:
d1:19:c6:5a:a6:a1:e7:70:09:2d:9f:fd:b4:ee:90:97:b8:e5:
1a:ad:d6:aa:ec:83:7a:7f:a6:ad:6d:55:72:ec:d4:30:34:ec:
2d:81:22:3f:2c:85:1c:61:ab:c1:70:ac:25:69:aa:11:5f:b4:
20:be:58:d9:62:3f:ae:a2:25:4f:17:b8:78:88:b8:0f:d1:44:
f0:55:db:7c:cb:dc:f6:9c:2c:11:46:f9:5c:4a:69:da:40:d9:
25:8c:0d:f3:e9:4f:2b:2a:7a:29:f3:eb:6d:65:98:cf:50:ec:
a6:73:6c:0f:44:92:db:d9:a7:d3:f1:59:b8:17:34:c7:6e:54:
03:52:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:33:23 2025 by rpki-client