Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: xQqEQaYKeXBPqwuFBFaXSxIw5zWEjl3gUQuKG22mFmM=
Subject key identifier: 45:1C:BA:3D:90:C8:53:9B:13:B0:49:A3:47:2A:1F:DE:47:2B:41:E5
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 019873E3B3EC2710598C156101846DD09621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 124F
Signing time: Mon 04 Aug 2025 07:02:39 +0000
Manifest this update: Mon 04 Aug 2025 07:02:39 +0000
Manifest next update: Tue 05 Aug 2025 07:02:39 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: WC8oo8+r1we0mlOmeasHjhHhPh2Q9F/Q85BYrgKvW24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b3:ec:27:10:59:8c:15:61:01:84:6d:d0:96:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Aug 4 07:02:39 2025 GMT
Not After : Aug 5 07:02:39 2025 GMT
Subject: CN=451cba3d90c8539b13b049a3472a1fde472b41e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:87:7e:4b:85:d4:7d:07:1c:16:1b:8d:6c:
c4:85:1a:9d:17:98:a9:e1:08:7c:fb:4f:39:40:f4:
9c:96:dd:ad:32:90:cf:7a:ae:6d:72:41:57:a9:aa:
72:7b:95:75:da:81:18:0d:18:4a:ff:a2:7e:17:a5:
ad:3e:b4:0a:0d:c0:ce:aa:39:6a:e0:09:e3:07:9c:
16:13:b3:ac:d2:cb:a6:8a:26:75:9e:63:db:3f:9d:
03:9c:b3:b2:af:4a:97:3d:23:3f:d3:d5:76:3c:f4:
f2:c7:c1:bc:29:06:6c:ed:e7:f3:a7:23:c4:f5:00:
d1:92:19:ee:dc:3f:ec:f5:d9:93:90:e1:c1:65:f6:
c5:3c:ce:fe:53:33:cb:bc:30:67:84:7d:a3:73:fc:
96:7a:23:da:67:92:20:b4:b8:1b:18:99:58:c8:5b:
ab:70:a1:81:9e:bd:96:25:ab:4c:d6:37:ac:3e:ca:
4f:68:bc:81:c3:3d:45:42:05:04:96:e4:7c:1b:40:
7d:86:7e:a0:00:26:ae:ac:2d:0c:3a:b4:99:46:00:
f2:21:dd:67:bc:55:c1:6c:0c:04:9f:d5:d9:4e:de:
5a:a6:dc:b0:71:ff:ff:83:f4:33:10:df:88:b3:47:
70:f1:8b:29:bc:da:7e:93:42:4f:ed:38:6c:d4:45:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1C:BA:3D:90:C8:53:9B:13:B0:49:A3:47:2A:1F:DE:47:2B:41:E5
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:54:7e:32:92:ab:91:36:c9:75:a8:73:20:19:47:13:f8:58:
06:c3:a7:9e:97:8a:78:c6:88:06:91:98:31:b2:a2:ea:8f:b1:
47:04:91:f2:b9:66:7a:90:48:db:48:20:4c:a8:87:24:81:06:
0c:a1:32:72:08:dd:ba:33:9d:2b:b9:e6:8e:96:30:e2:53:da:
3e:99:de:f3:a6:8d:5b:de:24:c9:54:48:4b:ae:ec:25:e6:4f:
66:be:50:0d:e4:46:c3:8e:1c:ef:96:02:fe:17:c3:0e:32:4e:
b7:0a:4b:15:16:af:85:42:0e:b9:71:92:25:c0:a0:2d:a1:0d:
c9:54:78:d7:72:8e:f6:80:37:e0:ab:14:f0:5e:97:7e:de:3c:
4e:a8:2a:f0:ca:b9:69:fe:0c:25:de:ef:6d:11:2e:16:ae:b9:
8c:91:9e:82:6a:f4:66:dc:c7:24:95:30:a0:d3:7a:b2:45:12:
c9:4e:d8:3f:c6:87:53:9b:08:87:87:c1:db:09:5a:9c:ae:bf:
76:f1:90:e6:74:04:7f:26:28:48:03:5b:88:b6:c9:23:cf:ec:
2b:85:36:3a:31:55:b1:ad:dd:5e:d2:71:00:1a:d6:36:e5:84:
90:4d:9f:c5:84:70:c3:df:fd:cf:35:98:77:aa:08:80:ae:9e:
3f:f7:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:46 2025 by rpki-client