Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: EcKhSl6h52fCDXpFsgAU4IERx+NxlT+SDWyscdWU7AU=
Subject key identifier: 5D:95:A9:2D:BF:26:EE:50:D1:A2:2A:67:4C:66:96:E4:4C:B9:CA:64
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019776E5E06A44FF0786809B4EFD24598B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1591
Signing time: Mon 16 Jun 2025 04:01:05 +0000
Manifest this update: Mon 16 Jun 2025 04:01:05 +0000
Manifest next update: Tue 17 Jun 2025 04:01:05 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: TIrJasM5eZ5T6jMSpUOxJopvat/tnZUzSx5uCEGwu8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:e0:6a:44:ff:07:86:80:9b:4e:fd:24:59:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Jun 16 04:01:05 2025 GMT
Not After : Jun 17 04:01:05 2025 GMT
Subject: CN=5d95a92dbf26ee50d1a22a674c6696e44cb9ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:a4:41:db:72:23:51:3b:10:e9:53:10:a9:
9b:a4:fb:88:3f:16:d7:44:61:5c:e1:54:88:a3:c3:
dc:63:dc:00:0e:36:2c:04:07:3e:42:b0:7c:a9:b1:
33:25:ae:7e:e4:6c:c0:56:f3:6f:26:17:08:1c:88:
5d:56:74:a1:8e:6d:fd:01:37:50:7c:e9:36:90:82:
3b:69:55:22:0e:84:da:ef:9d:d9:99:ca:4e:98:90:
ed:53:aa:0d:a9:a5:af:27:a3:b5:65:ab:1e:fd:31:
9e:25:98:7a:91:b4:1d:88:b4:28:fa:91:f3:c0:6a:
00:b5:09:4d:7c:6f:3f:1c:8b:ba:7e:94:ab:2f:fc:
c6:0a:af:10:3a:cd:7c:fa:4b:0a:be:6e:29:e0:80:
4e:84:b2:e4:fc:11:16:6e:31:66:b1:2e:a8:5a:0b:
c3:a0:0c:af:5b:15:b1:eb:74:18:3f:73:27:1f:2f:
39:2b:48:25:e9:be:26:36:f0:2b:85:ba:e9:bb:92:
73:a2:af:6f:2f:fb:1d:b0:50:bc:1c:01:88:84:7d:
a8:c2:7d:ee:a4:3e:01:70:01:12:e7:1e:42:34:11:
db:d5:80:54:59:1e:f8:43:30:29:71:82:89:f5:46:
59:4f:b4:9e:ff:51:f2:f7:bb:2b:ad:52:d6:e6:f1:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:A9:2D:BF:26:EE:50:D1:A2:2A:67:4C:66:96:E4:4C:B9:CA:64
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2e:53:e1:59:8e:34:23:38:19:a4:26:ff:0b:25:76:db:25:
3b:94:72:4f:e0:ee:8f:7f:f9:04:6c:8d:10:a4:8f:65:7b:d5:
9d:4e:2c:58:69:1c:a0:8f:1b:84:24:7e:33:c3:b6:45:4e:3f:
96:8d:69:96:77:c3:98:70:8f:81:2c:94:c6:ce:71:4b:88:58:
eb:48:c5:f4:c7:88:e8:8b:20:0d:b8:37:06:cb:58:26:38:c2:
81:65:8e:db:e3:89:5a:68:28:99:a7:76:6e:c4:9e:29:2f:f1:
a4:cd:9d:f1:2f:1c:47:8b:a2:6f:2a:4b:30:d9:a3:1d:20:7b:
44:ff:2a:e8:c0:bf:71:c3:f5:41:82:6d:7c:6c:02:e3:42:0a:
2e:fa:18:08:77:d3:22:d2:2c:d0:a3:ea:7b:31:83:79:a5:0f:
46:21:e3:38:71:a2:1f:dd:96:aa:92:b9:56:46:dd:8f:ef:66:
e3:fe:06:48:e9:44:37:6c:a2:4d:c7:87:73:31:fd:db:5b:32:
d6:72:67:38:fb:16:6c:79:bc:fb:3a:08:a8:5c:d2:de:3f:f8:
ce:96:3e:ec:b4:af:77:fe:07:e4:7e:8f:e6:29:a2:43:7a:52:
41:df:d7:62:27:8c:46:53:ea:8c:64:e4:58:10:ec:b0:0b:ec:
a7:7d:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:52:16 2025 by rpki-client