Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json)
Hash identifier: v9XUgHnuKiIFeT3otj8Iif1U9PUl3kXdLMvspqYVYlQ=
Subject key identifier: 59:D2:E4:89:F9:A3:7B:11:E9:3F:E2:25:52:FF:6C:E1:2A:7A:6F:80
Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Certificate serial: 01977D5528F392019D5B6379A618C677A74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
Manifest number: CC
Signing time: Tue 17 Jun 2025 10:00:22 +0000
Manifest this update: Tue 17 Jun 2025 10:00:22 +0000
Manifest next update: Wed 18 Jun 2025 10:00:22 +0000
Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: s6OhobxkpPEHSLgIlOqva/+BuaNMNFwcKmxREmKIZu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:55:28:f3:92:01:9d:5b:63:79:a6:18:c6:77:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Validity
Not Before: Jun 17 10:00:22 2025 GMT
Not After : Jun 18 10:00:22 2025 GMT
Subject: CN=59d2e489f9a37b11e93fe22552ff6ce12a7a6f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:db:a0:d7:13:cf:c9:c4:49:95:e6:75:79:
b8:d9:d7:6e:66:b6:f6:20:6d:15:8f:57:32:53:5e:
57:9f:c0:5a:76:47:88:c6:ef:c5:68:df:c6:d1:95:
00:23:eb:08:fc:50:24:03:0f:60:f6:33:5b:25:9b:
bd:bc:2d:64:ec:61:d7:c5:f7:e2:8a:28:03:2b:0a:
d1:b8:e1:d4:df:c1:25:56:56:f2:9c:9c:f8:20:ab:
7d:03:1e:4a:0a:58:3a:bd:40:5b:b5:98:c3:bd:de:
00:3a:5f:55:2a:aa:37:66:85:7f:e2:df:5c:78:fc:
4a:01:03:ae:ad:0b:67:74:8f:f1:84:d1:30:33:3e:
a4:85:bf:9a:c7:49:b5:2a:a7:77:1f:60:14:2b:e1:
25:1b:aa:7b:99:3a:74:92:62:07:01:bc:df:e8:61:
70:46:74:db:61:17:bc:e5:3c:dc:e3:78:8a:9f:a0:
af:99:ef:6a:f7:6b:d6:43:92:97:2c:56:c1:24:4b:
1b:42:76:d6:f9:cc:ec:43:d4:3d:0c:e0:85:38:77:
58:32:19:6f:2d:98:81:ba:a4:8d:c6:48:a9:12:af:
f6:51:8a:44:b2:41:eb:7c:a0:40:5e:b3:76:7c:62:
84:22:43:9d:37:75:a9:24:34:8a:26:ea:6c:e3:ca:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:E4:89:F9:A3:7B:11:E9:3F:E2:25:52:FF:6C:E1:2A:7A:6F:80
X509v3 Authority Key Identifier:
keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a7:05:7d:3b:b8:58:b1:f3:13:b0:00:3e:bb:10:16:04:6c:
4e:97:93:81:d2:b1:72:63:b6:ab:79:34:ed:e4:57:78:19:af:
c6:43:08:a7:38:fb:ea:86:1e:c3:b8:eb:6a:be:61:a4:29:cc:
c8:36:89:95:d3:17:36:86:da:86:e2:4d:17:f7:8a:21:f2:ba:
0c:fb:ce:d4:e3:20:a9:e4:dc:87:03:a8:a8:2b:3c:e6:a5:eb:
29:14:b4:ed:12:83:9e:a6:99:fc:73:8f:6b:66:6d:78:e6:c6:
32:89:cc:aa:43:aa:77:82:b1:d1:68:35:f4:7a:59:80:48:30:
9a:53:c6:2a:e3:e5:cb:b1:97:37:2d:c5:50:30:8f:19:e3:5d:
10:e7:f4:83:d8:70:2e:df:03:71:8b:ba:6e:e6:47:7c:cb:e8:
80:6d:65:f1:54:9f:00:ad:fe:1d:cd:4c:2e:10:b6:96:fe:f1:
35:b7:ee:ae:b4:01:50:03:e7:50:2b:e7:1f:82:86:fc:d7:a3:
56:44:bc:fb:fe:d1:a4:79:82:c3:39:9d:f7:de:5c:08:9c:93:
e7:19:45:1d:0a:c2:a9:a3:dc:6f:66:96:8c:6a:e6:24:eb:7e:
0e:52:e4:6b:3f:b4:5f:61:6d:59:5e:55:73:fc:2e:54:98:f4:
05:72:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:15:45 2025 by rpki-client