Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: UvdGjajNCfXCPdWIxx+okxJJ2LkSJW9tmIzpZvZjcqI=
Subject key identifier: F8:C1:3E:99:F1:B6:92:6D:DB:7D:79:D9:6C:EB:A9:10:1F:56:6F:66
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 01988A6A6046D235F7F6FA4E05BA826C1DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 05A7
Signing time: Fri 08 Aug 2025 16:01:23 +0000
Manifest this update: Fri 08 Aug 2025 16:01:23 +0000
Manifest next update: Sat 09 Aug 2025 16:01:23 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: 7v+t+ar2lxsuIZxndOT+nE4VYo80LELF/kKAVHKFEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:60:46:d2:35:f7:f6:fa:4e:05:ba:82:6c:1d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Aug 8 16:01:23 2025 GMT
Not After : Aug 9 16:01:23 2025 GMT
Subject: CN=f8c13e99f1b6926ddb7d79d96ceba9101f566f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:34:15:c2:c5:a1:34:d3:a5:92:94:bb:16:
44:d9:c1:43:c9:50:ac:6d:8a:d3:c5:46:13:0e:02:
b7:5c:89:27:46:88:87:99:1b:ff:17:d8:23:04:79:
28:fb:53:6f:8c:17:33:77:6e:6b:ee:89:da:f6:a6:
15:58:8d:71:d1:51:e1:b0:c1:a9:18:17:96:52:fa:
0b:42:a9:e9:77:e4:75:06:69:16:e4:29:30:3e:58:
42:8e:24:58:2d:74:4e:9f:7c:9a:c0:8d:f8:8a:e9:
49:67:84:34:23:11:87:d9:12:7c:55:c1:bc:10:71:
79:3c:ef:50:76:41:a8:ad:27:e1:1a:3e:eb:a7:c2:
ea:54:ea:1b:0c:52:4e:ec:2d:1f:24:e4:67:0c:63:
4e:e1:1b:ac:fc:ba:dd:1e:3d:51:8a:a0:cf:fa:08:
93:01:1b:54:b7:9f:0d:e8:3b:f4:4a:b8:21:c6:8b:
87:11:42:b7:ef:27:c5:d6:0e:88:f8:2d:6a:58:77:
86:c4:08:8d:a9:c4:ce:43:87:99:62:a0:a0:49:c2:
94:6e:34:7a:42:ea:73:b9:8d:33:d3:ff:9f:91:b7:
d9:83:00:f6:4c:fc:bb:3d:bc:22:60:cb:a4:d8:ee:
d5:cd:ab:a3:c8:93:0b:c3:d9:b8:ba:73:62:44:60:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:3E:99:F1:B6:92:6D:DB:7D:79:D9:6C:EB:A9:10:1F:56:6F:66
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1b:15:05:85:0b:09:94:c5:f2:5d:47:40:ba:ef:c2:dc:01:
d1:00:01:17:4f:8e:40:23:13:33:2e:65:a5:78:db:fd:12:47:
f3:c5:94:49:f3:90:61:0d:3b:cb:2c:78:12:78:7c:94:ae:9a:
29:86:8f:38:c8:67:58:a5:34:a3:58:d7:5b:24:f4:83:1f:0c:
69:74:f8:ed:3e:38:aa:b1:41:8c:19:3c:a9:eb:07:46:29:72:
9e:f9:f0:ce:fa:92:fe:a5:16:aa:3a:b3:12:c3:51:05:05:00:
0b:11:66:1d:d4:62:1e:e0:a2:57:0b:50:e8:7d:be:a7:de:41:
74:95:fc:97:6d:59:3d:c4:12:ce:7f:e1:ae:bf:bd:08:a0:80:
a9:7c:92:58:80:62:6e:db:63:38:ad:8b:29:bd:11:59:bf:cd:
6d:2b:00:5e:c9:c8:ad:a0:24:42:71:8c:f0:e6:b0:b1:e7:5c:
a5:d4:7d:30:16:60:22:06:67:48:a6:41:3d:6c:ee:ee:c0:67:
60:29:8d:62:d0:34:bb:da:9b:fc:55:e1:0c:89:8b:5e:b9:fe:
98:2a:c0:fb:99:e8:46:cf:15:46:33:46:a9:d3:cc:f4:eb:d6:
3d:10:3c:d7:c5:ef:1b:2a:a1:eb:53:05:7e:66:c9:55:a2:ec:
c2:6b:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:01 2025 by rpki-client