Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier: 3xi2qg/jADj1SyjRNkjwYAO+Jau0U7tmV72uupTS5Gw=
Subject key identifier: 45:52:5F:92:3D:54:D7:04:EB:50:B8:05:4A:A8:04:A3:1E:AC:41:99
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial: 019894B732C1E7A04D9EA7FA9795CED48039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number: 09EB
Signing time: Sun 10 Aug 2025 16:01:30 +0000
Manifest this update: Sun 10 Aug 2025 16:01:30 +0000
Manifest next update: Mon 11 Aug 2025 16:01:30 +0000
Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: JzFEd1JMjxm65kUbMHjnVUeK5pYirwA4hDacXElsqNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:32:c1:e7:a0:4d:9e:a7:fa:97:95:ce:d4:80:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Validity
Not Before: Aug 10 16:01:30 2025 GMT
Not After : Aug 11 16:01:30 2025 GMT
Subject: CN=45525f923d54d704eb50b8054aa804a31eac4199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:a2:7e:1a:a1:38:c4:cf:bf:1e:21:23:0d:
c7:c2:a7:00:c2:0b:b1:74:98:a9:ee:4f:66:f6:4d:
fd:39:ca:b6:e2:a7:01:16:47:00:90:cd:6f:4c:99:
79:b4:4b:6b:86:a5:5e:7b:a1:40:22:14:65:1f:fd:
f1:9c:d7:d6:9a:14:01:71:e5:92:a6:1a:02:ef:6b:
15:c3:08:d2:6e:b5:6c:5f:5c:a6:96:e2:f4:84:6a:
0b:4c:61:67:bf:91:fc:0a:cf:22:05:97:41:0f:65:
cd:a6:35:aa:64:fe:c4:56:16:83:6e:b1:b2:8c:f6:
41:58:d6:ac:86:f3:dc:58:eb:00:05:9c:42:9e:f8:
9a:ac:b7:d8:92:da:e9:91:17:a4:95:21:89:06:70:
4d:05:d9:9d:51:55:6c:55:b1:b4:58:43:92:99:2b:
f9:4e:97:e7:4e:7b:8c:d6:00:fa:a3:77:28:71:18:
20:4a:4c:8a:d3:82:6b:ec:cc:c0:b3:fd:e9:d1:fb:
02:83:77:e3:35:2c:82:bc:64:6a:46:10:36:cb:a7:
48:26:e8:23:84:8c:8f:9d:df:f2:be:90:4e:1e:39:
72:a4:38:fb:bb:60:a6:b7:1a:4a:57:f7:23:75:d5:
c9:27:d1:c0:ca:27:03:9b:e8:84:da:e5:a2:f5:ce:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:5F:92:3D:54:D7:04:EB:50:B8:05:4A:A8:04:A3:1E:AC:41:99
X509v3 Authority Key Identifier:
keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:39:7c:e0:3a:84:71:58:33:39:c8:c9:db:5f:43:a3:be:f9:
a1:89:57:d4:ef:d7:79:58:44:ee:47:fc:b2:5e:87:b2:4b:ff:
2f:f2:bc:fe:ee:68:1a:bd:16:0e:54:29:0d:26:7c:12:5b:50:
86:5c:d2:72:00:db:7c:25:d3:db:6a:67:c3:7b:ee:35:08:18:
4d:7f:bc:23:7e:35:2f:f2:12:6d:32:6b:ee:bb:c4:a6:66:c4:
63:f8:5b:32:e5:c9:54:f4:fa:5f:42:a5:4a:a6:67:2d:c6:5a:
72:68:75:9c:3d:6f:b0:50:03:94:ca:78:f3:c6:58:81:93:28:
9d:30:84:25:26:2d:ca:80:b2:31:52:6c:6f:24:2d:9d:c0:48:
2b:e5:ae:ad:c3:a4:40:6a:a7:d6:00:79:98:f7:41:e6:05:30:
f5:cf:a6:5b:6e:cd:64:c2:56:33:e0:0d:6d:28:00:3b:af:61:
fc:83:7f:42:a1:46:08:d7:ad:f4:29:68:cd:01:6f:ac:33:56:
e7:02:18:2a:a6:87:01:93:db:89:d5:25:41:df:d1:91:a2:da:
84:b9:ee:ea:3e:82:28:e4:3d:85:99:fa:d6:87:3f:d8:7f:f4:
f5:f7:61:da:a6:b0:7c:07:e0:34:95:d6:f5:5f:3c:b2:06:2c:
74:35:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:55 2025 by rpki-client