Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: Mvfp1i7duvioSLUiHRdW5t2yNQAi/D6d+oFl8cHwAIM=
Subject key identifier: 15:57:54:B3:A3:B7:E3:4F:CC:CF:EB:7D:10:CE:99:1B:81:7A:93:2D
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 01976FD10F7D4598F1DF30B0BD58E7E4390E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0477
Signing time: Sat 14 Jun 2025 19:01:01 +0000
Manifest this update: Sat 14 Jun 2025 19:01:01 +0000
Manifest next update: Sun 15 Jun 2025 19:01:01 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: UYN/xzSXz93FvxG73/6+ihL/dHd0b18+zgQYE/Njjqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:0f:7d:45:98:f1:df:30:b0:bd:58:e7:e4:39:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Jun 14 19:01:01 2025 GMT
Not After : Jun 15 19:01:01 2025 GMT
Subject: CN=155754b3a3b7e34fcccfeb7d10ce991b817a932d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:5f:c5:89:02:97:d2:fc:68:7d:3c:8b:14:
62:7c:4e:9f:e7:15:db:46:46:63:6d:00:56:de:63:
13:83:18:b3:98:a9:74:fa:28:1a:25:0c:4c:26:ee:
1b:75:18:9b:e3:64:6d:68:21:da:e2:d4:78:bd:41:
66:57:1b:f8:f2:15:12:a7:1b:fd:d8:ba:ee:3a:94:
60:08:4c:6f:94:e2:57:fe:df:b3:7f:94:46:39:55:
62:63:9c:c8:94:57:23:2b:d1:5e:8b:fc:dc:f7:eb:
52:88:6c:50:de:a2:53:a0:e4:c1:fb:86:d6:78:8a:
09:ec:d2:92:be:ab:1e:e5:f0:06:3e:ad:e3:68:15:
9a:cf:70:2a:e7:cb:05:76:53:a5:8d:b7:f7:8d:e9:
87:e0:ab:93:32:d0:18:2c:d7:55:70:81:fb:79:60:
e8:38:63:0b:2b:27:aa:3c:c9:e7:87:52:b8:11:33:
e9:65:19:5b:34:54:d4:35:d6:28:97:7e:94:29:ab:
34:21:d8:29:66:d6:89:98:d7:f8:ca:43:98:54:e1:
cd:fb:f2:6a:a8:4e:78:3c:68:b2:4e:73:6d:10:2a:
d6:22:58:ce:f6:21:6d:ae:e8:91:82:8e:f1:23:e1:
dd:b3:08:92:10:f1:57:59:a0:ba:9d:03:95:f1:2c:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:57:54:B3:A3:B7:E3:4F:CC:CF:EB:7D:10:CE:99:1B:81:7A:93:2D
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:50:fb:21:5d:87:6c:bd:15:3e:13:fd:d2:da:2f:cc:7e:f9:
6d:ca:1d:09:32:2e:05:e6:fd:80:30:5b:8e:e2:61:4e:8e:df:
97:2d:2a:11:28:67:5b:0e:3d:c1:9f:4d:ba:d2:86:ae:7c:49:
cc:a0:e0:f2:4b:d6:09:87:c4:79:46:f7:9e:43:21:e9:27:13:
66:61:08:eb:7e:e6:b7:be:6c:1f:26:10:14:23:3c:5e:6d:f9:
28:95:af:f1:d4:04:0a:0f:54:06:c6:18:a6:e0:a7:de:97:d0:
08:c5:29:38:fe:88:1c:dd:eb:11:6f:2a:3a:a8:63:ae:a0:b0:
eb:14:3a:00:3a:02:f6:fa:ff:c4:7f:7b:86:87:1d:0a:00:d3:
95:7e:05:35:f3:30:b3:b2:4d:a0:0a:39:8b:d0:1c:4b:b0:eb:
8a:b2:e6:7d:40:75:d1:c6:3a:65:c8:a5:9a:0c:2d:75:5e:cc:
1a:08:7c:c8:e3:6f:13:58:19:dc:27:57:69:bc:ff:e2:53:f0:
51:fe:82:ef:97:18:5e:1e:1f:11:a0:31:3b:33:b0:eb:25:89:
33:26:62:0f:39:30:fb:60:3c:4e:a6:55:00:ba:f3:da:79:5d:
ad:ad:16:e3:2d:f7:6e:3c:0d:2f:66:e3:5c:59:46:a6:d9:47:
4e:f7:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:06:31 2025 by rpki-client