Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier: M8WHsG+DzLi/MpPBQnJKOVHyepV/Crz6l+ahGnObpCI=
Subject key identifier: E3:65:D9:25:AE:15:39:BB:71:24:CA:72:2C:E4:D8:00:E5:EA:0B:C7
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial: 019873E1BF6767E41BCA5F02C89E512E3628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number: 0FCD
Signing time: Mon 04 Aug 2025 07:00:31 +0000
Manifest this update: Mon 04 Aug 2025 07:00:31 +0000
Manifest next update: Tue 05 Aug 2025 07:00:31 +0000
Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: x0wt5Z3MOh+ZHbW+YRLlHVtmLTW9lHumJ+zRVEX5q1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:bf:67:67:e4:1b:ca:5f:02:c8:9e:51:2e:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
Validity
Not Before: Aug 4 07:00:31 2025 GMT
Not After : Aug 5 07:00:31 2025 GMT
Subject: CN=e365d925ae1539bb7124ca722ce4d800e5ea0bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:44:42:7b:ee:6a:c4:3b:fe:15:22:e1:eb:
80:bf:cc:e7:7a:89:5a:4d:c1:d1:22:be:8a:24:7c:
3e:ca:58:60:bc:0d:18:df:5f:60:e7:b7:a1:52:35:
29:78:9c:e8:17:a6:01:32:3c:cd:33:9a:e4:8e:db:
ff:a4:cc:49:a1:10:ce:55:2e:96:e4:ae:a2:eb:1b:
49:5a:93:3f:98:c5:d0:f6:34:20:08:07:6c:82:63:
9f:35:17:82:ff:c4:1c:45:d8:76:fd:8c:c1:35:2e:
d9:ab:f4:61:5c:46:0b:6d:ee:c4:8a:97:6d:1d:cd:
d7:99:b5:91:02:24:04:74:be:ab:94:bb:57:26:87:
59:e3:df:41:9a:7e:0c:07:81:d8:f2:15:cc:d2:8e:
4c:64:8a:ee:7f:ce:94:24:1a:b4:ea:3a:bc:27:1c:
80:09:1e:5e:7e:57:dd:2b:5d:90:e5:91:b9:36:37:
65:fe:3e:b3:83:af:d0:5c:03:59:dc:14:ee:3b:38:
2f:cb:f1:bc:6e:e6:85:01:b7:cd:78:6f:d2:ee:bc:
d9:53:6d:f9:16:c3:99:16:79:54:92:da:64:69:c9:
63:e6:61:7c:ac:d3:2a:ec:08:ee:1c:b5:79:2b:de:
9c:bd:d1:35:3e:85:85:74:9b:47:58:bd:19:52:7e:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:D9:25:AE:15:39:BB:71:24:CA:72:2C:E4:D8:00:E5:EA:0B:C7
X509v3 Authority Key Identifier:
keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:1d:1c:43:60:1e:c8:d3:07:d7:49:70:58:8e:b2:f8:ca:
c6:ab:b0:fd:c7:55:aa:90:dd:07:6f:e5:58:e9:cd:49:5d:ee:
43:2d:12:5b:f0:6c:c3:88:a3:ad:4f:7b:9f:f3:67:4b:ba:66:
8b:99:9d:1b:ff:1f:86:45:38:cd:2d:1f:0e:03:49:ea:f1:b4:
de:cf:44:d1:80:a8:1d:f4:06:0a:99:b7:14:90:5b:89:cc:bd:
7d:70:f3:eb:58:d1:c7:29:04:9d:b1:fd:07:80:68:9f:e9:e2:
38:29:9f:d2:af:9a:bb:75:9a:30:33:27:31:db:25:a8:95:5c:
83:28:83:29:40:47:9c:7b:b6:fd:3d:f7:59:ef:ba:13:5a:e9:
d4:a8:db:cf:62:be:27:70:12:7a:ce:8a:eb:2a:01:28:4b:48:
d2:e1:e5:51:7e:46:a6:92:b0:bf:9b:49:c5:1c:b1:7d:52:b3:
d6:4c:d1:e0:7d:6b:0c:29:db:d6:5d:f6:77:92:82:19:14:d3:
06:81:66:2e:2e:56:69:bd:bf:3c:83:4d:08:89:6f:36:dc:0b:
08:4c:80:4c:17:15:05:e6:0b:47:0c:02:b9:e0:bf:7d:fc:3a:
54:5c:c7:31:b9:45:a4:cc:57:b2:61:84:c7:40:d8:90:91:60:
71:0a:6f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:35 2025 by rpki-client