Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: g9WpmVJPE53jtpSp7obiqhanB6t3RteXPLRRq5ftJtY=
Subject key identifier: 89:67:95:7E:E9:F9:7B:D7:96:CA:EF:03:E8:BE:E4:0D:FD:4D:4C:1C
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 01976F2C15282D1DCC8F2B7A8531EBE1041F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 11C8
Signing time: Sat 14 Jun 2025 16:00:49 +0000
Manifest this update: Sat 14 Jun 2025 16:00:49 +0000
Manifest next update: Sun 15 Jun 2025 16:00:49 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: XjMfYX0hTCCLvPP78FbaBy3yf3Nv2/jd6GGBabjzFSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:15:28:2d:1d:cc:8f:2b:7a:85:31:eb:e1:04:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Jun 14 16:00:49 2025 GMT
Not After : Jun 15 16:00:49 2025 GMT
Subject: CN=8967957ee9f97bd796caef03e8bee40dfd4d4c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:d9:10:df:a5:a0:aa:a4:c0:ad:20:1c:03:
02:05:49:b8:9a:ab:60:b0:5e:51:e4:7d:7f:4b:61:
7b:16:60:b4:6d:2b:3a:7d:2c:e8:dd:31:4c:ae:e7:
0c:5d:d7:96:34:df:8f:d0:0c:cb:75:86:ae:30:7c:
9b:f2:4b:54:fd:7a:20:b5:f5:0c:fb:d9:6e:f5:aa:
84:54:4c:e4:1b:a7:4d:91:1e:83:0d:e3:45:1e:33:
1d:4f:25:4c:dc:b4:6b:16:20:03:fe:87:90:5a:99:
a3:63:11:25:44:4e:29:97:5a:38:9d:8f:c0:36:d5:
0a:89:f2:5a:da:f3:ba:9f:3c:b2:98:48:33:a4:e7:
eb:c1:eb:80:d7:cc:d4:93:e8:29:14:0f:71:b9:61:
e9:c1:d1:2d:f3:7d:b3:c1:45:71:3b:04:60:0b:88:
a1:f8:da:10:c1:c1:5e:8c:5b:02:0b:d1:04:e8:c7:
39:7e:fe:cd:e7:a4:b5:36:ce:bc:50:d6:1f:1c:9e:
fc:2f:b6:64:63:80:2e:34:44:22:c2:31:f2:c5:b6:
6c:bd:fd:e4:bf:9d:fd:34:fc:71:31:3f:f2:59:65:
4d:c8:81:99:b1:0a:5d:27:ed:d4:6b:96:b1:c1:0b:
46:6a:66:48:29:ab:9e:cc:4f:77:a7:12:88:a3:73:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:95:7E:E9:F9:7B:D7:96:CA:EF:03:E8:BE:E4:0D:FD:4D:4C:1C
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:27:c5:fa:74:3b:af:62:fd:06:33:15:28:5c:19:66:93:55:
3b:4c:8e:72:7a:c3:2d:52:5b:ee:c1:a8:49:cb:dc:58:b0:77:
80:01:1f:c7:90:50:86:8e:d2:47:7c:35:5c:62:c2:4a:8e:f6:
8e:28:e0:02:88:0e:42:37:f0:7a:b7:ac:78:9b:68:5a:4d:ea:
c4:e8:86:8b:c6:1c:a5:99:df:ce:cb:48:e4:76:0a:c3:eb:b8:
42:c6:b6:fe:cc:c2:27:6d:12:c5:a0:4d:44:42:ff:28:6d:2e:
92:cd:96:1a:75:3c:b7:b1:f7:53:e1:5a:02:ae:48:2e:e6:cc:
0d:1d:f5:3f:2c:71:68:2f:7c:bc:ea:4d:05:b4:07:07:2e:b5:
6c:36:0f:f9:33:b7:7c:33:ad:05:b5:fb:96:6c:6f:5d:3c:8d:
97:82:d0:52:a7:3a:df:82:7a:a3:dc:a4:2b:f3:32:e1:91:58:
ef:9f:73:51:e6:19:05:77:b1:72:03:83:26:fa:3c:39:d7:19:
ca:27:6a:a1:8f:79:f1:5e:a8:d1:59:4f:d4:62:15:7a:c0:35:
e2:6a:fc:2d:c9:cb:1e:6a:75:7b:55:5e:71:59:8c:89:16:51:
06:3d:a3:1d:3e:8c:00:38:df:82:dd:94:83:52:7e:45:b2:89:
b8:ff:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:57 2025 by rpki-client