Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: 4G14SPm1hp52z1OeaXyGHAC5Gyw6gC2I8Q/Xgid9wTQ=
Subject key identifier: 4A:40:28:A5:2D:AD:CD:2B:41:D0:04:33:68:52:67:D8:8F:43:63:84
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 0197775339B56D65C242818CD4C83A39A333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 0C25
Signing time: Mon 16 Jun 2025 06:00:32 +0000
Manifest this update: Mon 16 Jun 2025 06:00:32 +0000
Manifest next update: Tue 17 Jun 2025 06:00:32 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: l+n5z3VHf9RwP+mWbrCOqDPEbaQIhV3nugHlkB7x6TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:39:b5:6d:65:c2:42:81:8c:d4:c8:3a:39:a3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Jun 16 06:00:32 2025 GMT
Not After : Jun 17 06:00:32 2025 GMT
Subject: CN=4a4028a52dadcd2b41d00433685267d88f436384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:a9:60:93:6f:d4:18:27:1c:a1:dd:8b:5d:
6e:f4:17:13:b5:b1:6b:51:3d:c9:cc:d4:d9:9c:e8:
51:4e:75:7e:dc:dd:6d:d2:b2:d8:dc:fb:c3:5e:a9:
5f:bf:df:b5:94:98:33:9c:85:99:f7:4a:8a:93:f7:
b6:04:f9:55:cb:80:17:7d:c1:07:c4:28:1e:d7:34:
01:b8:f2:e4:09:ce:06:6e:25:12:e6:34:d2:9d:62:
a7:ba:ff:74:38:b9:8e:97:09:8b:b1:83:f9:c1:e0:
b8:44:cf:08:6c:bc:c1:14:78:e5:c7:ad:54:f3:40:
52:2a:ae:8c:2a:c7:93:b3:dc:97:bc:d4:d3:a3:c1:
67:34:49:2d:2e:91:48:9a:b2:7f:a9:4a:67:62:bd:
33:8d:0b:84:11:df:23:b2:58:f8:46:0e:29:73:e7:
5a:81:1b:4c:5b:5f:90:13:0e:a9:40:a2:e7:8f:76:
56:cf:c8:ae:cc:ce:15:0d:64:53:51:fe:52:71:b2:
73:fd:a5:fc:f0:21:91:54:ca:87:67:b0:64:c9:16:
a7:47:ce:95:ed:ed:03:d7:71:cc:bb:29:af:64:6c:
7d:e6:33:e2:22:23:cf:84:f6:1b:8a:61:a1:59:78:
e4:36:ef:8a:e6:f0:f8:aa:6c:5c:4c:20:67:d1:99:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:28:A5:2D:AD:CD:2B:41:D0:04:33:68:52:67:D8:8F:43:63:84
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:64:4e:7d:4c:8b:be:2a:b9:92:c4:a4:92:e4:8c:1d:49:e7:
66:be:30:e3:1d:d1:72:60:f9:aa:ec:3b:85:b9:60:29:89:9a:
45:29:a6:b8:52:d4:82:1f:d2:85:c1:61:0a:cd:06:d6:62:45:
a7:4a:ff:68:dc:e1:c2:c1:01:d2:fa:d0:8c:f4:3c:b1:a5:b0:
1c:0d:5d:a5:de:f0:b9:3f:d0:1e:75:fd:f6:46:67:81:ba:65:
08:68:ad:97:f3:4d:dd:52:53:32:f2:d2:7f:bc:81:ee:40:0a:
05:f3:58:ac:e0:3e:d7:db:36:56:5e:3f:af:f7:b1:ae:cf:57:
10:c7:71:61:c7:c4:30:44:16:2e:bc:30:c0:e7:2b:e8:6d:57:
c6:f4:d4:d1:05:48:22:8c:22:64:a7:9f:ac:8e:21:2f:b3:d1:
47:a0:da:a2:4e:bd:2f:af:4b:d5:ab:6a:5e:17:c1:37:7c:b0:
f4:a1:1d:14:5f:cc:b5:36:bf:3d:c8:d4:25:ef:55:2d:1d:0a:
f1:4b:cf:12:c4:a9:dd:89:c4:f3:6c:7e:cb:23:d1:ab:f9:47:
4c:6c:b3:e1:6b:09:ec:1a:f4:ba:58:7e:c3:8b:7e:d0:34:34:
f8:35:fd:d6:c8:c4:53:a9:2a:ca:be:0b:2e:e7:80:0d:da:5b:
57:52:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:56:12 2025 by rpki-client