Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: PNexcHE1s6C2/oyLpxFCU4FIYcK3HZtPp+LrFFab+Ng=
Subject key identifier: 91:EB:68:C5:2F:90:07:B5:77:33:E7:63:73:20:44:66:DB:0D:CA:CA
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 0198729849A9E20C01DF00B16343F5A0C2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 04FD
Signing time: Mon 04 Aug 2025 01:00:39 +0000
Manifest this update: Mon 04 Aug 2025 01:00:39 +0000
Manifest next update: Tue 05 Aug 2025 01:00:39 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: gZelVPcnAJNJFZAQjFgyDF4z02TX+3Ax5rP8mQyi8ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:49:a9:e2:0c:01:df:00:b1:63:43:f5:a0:c2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Aug 4 01:00:39 2025 GMT
Not After : Aug 5 01:00:39 2025 GMT
Subject: CN=91eb68c52f9007b57733e76373204466db0dcaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:31:64:40:88:77:09:1d:cf:67:28:ee:f4:
12:60:b3:26:28:b7:ef:31:05:3b:80:4d:92:d0:74:
e0:2b:e9:7d:e7:ac:06:1c:6b:2f:60:7b:61:16:ac:
ed:5f:5a:21:25:0c:65:7f:fa:e7:ad:c3:03:06:04:
bb:1d:58:0c:bf:a7:d9:fc:26:a1:2e:d4:4c:ed:f9:
07:cc:58:91:f4:a9:83:fa:ee:fb:16:9d:80:aa:e2:
d4:3b:0e:05:46:5d:0b:24:bd:c1:11:54:55:9c:d6:
cc:cf:e1:eb:74:61:31:b4:6e:87:93:8a:4f:96:47:
eb:e5:44:a0:9d:34:db:f7:7a:10:51:7e:e9:d8:88:
bc:20:38:be:04:cc:63:53:b7:be:f1:d2:38:83:9f:
55:3a:c8:b9:99:4c:ba:5d:15:5f:2e:8b:30:18:dd:
84:29:24:5b:e8:19:2a:5e:97:d0:77:f2:d3:b4:70:
89:a1:7d:d7:5b:93:40:30:f9:c9:8d:16:91:21:3f:
05:07:92:91:f8:b1:27:f6:16:82:05:94:2a:56:1e:
b9:1f:1a:43:eb:0b:94:10:ac:a2:6d:c4:fa:bc:3b:
6b:e4:8f:9a:61:2d:18:a7:ca:95:7a:fe:4f:9b:c0:
14:fe:1a:ac:a5:42:21:47:0d:19:9b:54:26:15:f0:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:68:C5:2F:90:07:B5:77:33:E7:63:73:20:44:66:DB:0D:CA:CA
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ab:15:f3:ac:59:82:09:76:17:1f:57:8f:aa:60:fe:70:1a:
84:ad:02:63:ed:e5:96:75:78:19:9f:df:bb:9e:c3:e6:53:77:
f8:b7:09:50:43:01:95:39:f5:74:d7:55:5e:1f:28:0a:39:f2:
2b:43:3f:40:c4:ae:82:7e:fc:8a:6c:89:97:6e:4d:93:ad:f3:
a9:f5:07:a6:c4:8f:9c:b3:75:2f:44:d8:92:35:e0:10:ce:ff:
5f:55:aa:f3:26:50:1b:d0:53:72:9e:45:ec:b1:a0:15:a8:64:
91:d3:16:b5:e3:5c:a0:de:2e:e2:35:ec:4c:df:3a:e0:8a:e7:
96:3c:cd:d0:42:6c:56:7f:1e:98:77:0a:47:75:36:c1:38:26:
8d:0f:82:06:0e:6f:5a:04:8e:f5:00:36:19:52:57:da:72:93:
6f:54:56:4d:42:55:e1:82:57:52:3b:f4:5f:e2:00:b7:35:17:
90:84:1a:fb:17:79:79:ad:2d:6f:69:97:eb:fe:e6:31:ee:f8:
13:4b:7a:00:d0:68:b1:59:91:b7:27:75:3a:cf:90:ee:ea:b3:
94:83:4e:58:f9:70:52:0b:46:26:18:52:b1:70:66:89:d6:7f:
87:42:d1:76:d4:f6:fb:5b:67:11:3b:75:6b:d6:73:ea:c6:37:
06:82:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:12 2025 by rpki-client