Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: aJQSKj0WFff28iryS9Nd+0pcO9XBb2twQC00eKZqhsc=
Subject key identifier: 08:1A:E5:38:73:EB:57:10:19:76:7D:8A:DD:84:CF:E7:18:6C:E8:67
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 0198A0F162AC0F8F9369F2091B0EEBC56C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 059B
Signing time: Wed 13 Aug 2025 01:00:30 +0000
Manifest this update: Wed 13 Aug 2025 01:00:30 +0000
Manifest next update: Thu 14 Aug 2025 01:00:30 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: PeUNCDXlYVrgrZs385S2WHZFupge/4aESqtDP18SBSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:62:ac:0f:8f:93:69:f2:09:1b:0e:eb:c5:6c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Aug 13 01:00:30 2025 GMT
Not After : Aug 14 01:00:30 2025 GMT
Subject: CN=081ae53873eb571019767d8add84cfe7186ce867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:4f:12:dd:5b:03:dc:cc:98:35:a8:8c:54:
dc:c9:4b:48:75:7a:b9:d6:34:16:ee:96:3f:89:ed:
66:59:ea:62:68:11:33:3f:d9:3e:cf:68:c7:60:5e:
51:c6:af:93:cb:a0:a2:11:2f:cf:c2:12:82:8d:f6:
ac:45:5e:c3:95:8c:e4:c6:1e:7a:49:56:e4:1c:d5:
e0:df:5c:8e:04:c2:df:4b:4d:81:a3:eb:3c:04:a0:
ce:f9:4a:f8:a8:b1:fd:98:78:d1:49:ba:7f:ba:45:
25:d1:9a:c3:45:70:bc:2b:f6:e1:3a:96:93:8b:fd:
0d:35:ce:ad:0c:b9:33:56:6b:67:65:fb:2d:8c:21:
c5:83:e7:ab:d6:ab:59:e9:67:cb:bb:09:a2:7a:8d:
1f:a2:3d:a3:58:14:d9:fc:51:25:9b:5a:5a:d7:18:
9a:36:1a:c2:50:d4:f0:24:a1:b6:42:f6:20:05:d8:
1a:5e:4a:d0:ea:a2:b0:55:eb:de:02:7d:ed:17:2e:
51:64:33:81:b3:0a:c6:d2:44:85:f7:59:0f:12:ec:
a7:04:52:39:37:73:e3:df:c0:ce:91:d6:a0:55:cc:
61:7c:65:fb:c9:85:76:92:21:b2:8e:53:10:79:f3:
71:bc:7f:e6:92:84:6a:7f:8f:31:42:53:d2:c4:f1:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:E5:38:73:EB:57:10:19:76:7D:8A:DD:84:CF:E7:18:6C:E8:67
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:d9:d3:24:01:1b:f6:1d:27:7f:73:ed:d0:31:43:39:21:
1e:3a:62:a4:4f:5a:ec:74:46:74:c5:2f:b5:d5:93:af:5a:90:
f8:0e:b9:22:5c:32:2f:31:50:86:13:6d:8b:87:47:6c:3b:30:
42:b0:0f:24:0d:fd:cb:06:e1:f6:30:f9:56:60:22:76:e6:80:
25:eb:66:4b:51:cc:38:fa:82:7c:55:66:05:9a:22:f5:8d:a4:
90:41:9a:b6:c7:c1:83:44:fd:95:c5:ed:ac:58:76:8f:5f:07:
91:71:88:8f:bc:1a:f3:fd:eb:4d:84:87:0f:d9:93:5d:6e:42:
08:f6:17:20:a1:5e:9f:89:ae:c7:2f:30:28:14:35:62:b3:50:
cb:eb:d5:24:cd:35:ba:a5:4a:de:e3:3f:85:7d:97:4b:7f:b0:
bc:d8:64:05:ff:6e:c6:82:63:99:31:79:d0:de:51:57:43:99:
10:06:d4:17:ee:f4:d2:7b:81:28:f5:f9:da:40:98:5b:b3:a0:
b6:f2:3a:df:9b:55:b0:43:b1:fd:7c:3a:ad:1c:2a:71:6a:3b:
4c:5b:13:8f:99:0e:9d:80:7d:3f:f0:d2:87:d1:88:d2:3a:51:
4b:53:fd:1c:7a:f2:0f:a5:c2:a5:97:d8:4d:0d:d2:6f:60:70:
fa:d8:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:06 2025 by rpki-client