Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: oXwrFN87JSxrqU5+SuQkS+WKte7vbAI085ziTDHvUiQ=
Subject key identifier: F2:67:62:B8:37:7E:4A:50:D7:02:5B:06:18:15:5D:AD:9A:F7:82:76
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 01976F2C5F141D181B700D2FA8B9901A7F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0C75
Signing time: Sat 14 Jun 2025 16:01:08 +0000
Manifest this update: Sat 14 Jun 2025 16:01:08 +0000
Manifest next update: Sun 15 Jun 2025 16:01:08 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: SqJq/AOyi2a3Y+iIU/mKj+T+68aJ14HiTs22eUF6j9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:5f:14:1d:18:1b:70:0d:2f:a8:b9:90:1a:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Jun 14 16:01:08 2025 GMT
Not After : Jun 15 16:01:08 2025 GMT
Subject: CN=f26762b8377e4a50d7025b0618155dad9af78276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:b8:68:90:91:a3:fc:04:d8:c7:d6:76:3e:
af:10:9a:c5:d4:3d:8a:a0:44:cd:8a:74:01:85:7c:
96:03:04:aa:39:6d:58:f3:5f:4b:f4:bb:e1:60:af:
4f:ad:fa:21:1f:ed:64:ea:0a:cb:86:02:9d:a3:d5:
e8:cd:ab:ce:0d:81:c7:20:89:e1:f0:4b:47:fa:24:
2e:81:e7:5c:3a:2d:25:a0:9a:ea:d4:4e:6d:72:fb:
9c:8f:63:4c:8e:ec:a3:d4:bf:7b:c4:b3:f2:ac:d1:
c1:d6:3b:c9:14:3d:45:19:49:4e:3d:1c:28:a7:52:
fa:fb:bb:4b:0e:96:a7:27:e8:90:c7:39:db:b6:d6:
ba:0a:64:b2:da:ed:32:c2:3d:57:e5:8e:59:c2:b4:
29:0b:87:d4:7a:bb:b4:b8:db:26:18:34:99:ad:ec:
50:01:34:c4:2a:6c:82:37:30:ca:a5:4e:aa:11:6a:
aa:93:21:f3:16:3f:4d:47:ff:74:41:b5:fb:9b:7e:
ba:fd:c0:3e:ac:ad:cf:2a:eb:6b:c2:25:c7:33:ed:
6f:69:d5:3f:d4:d7:a8:b7:00:20:09:a9:ce:79:bc:
00:8f:f1:b8:e3:8b:ff:8f:ef:02:96:73:ab:cb:7e:
2f:09:e2:f1:4e:2d:1c:62:6e:35:e9:e0:d3:ca:be:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:67:62:B8:37:7E:4A:50:D7:02:5B:06:18:15:5D:AD:9A:F7:82:76
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:8d:0d:6c:05:5c:c3:c0:2a:96:e5:9c:ed:fe:3d:3b:97:
67:a5:59:85:c8:af:92:68:6d:25:6d:9f:4b:f9:9a:64:6e:90:
d0:08:ad:ee:b1:86:2d:86:50:40:50:66:79:c5:d0:84:a1:34:
45:d4:5c:e1:e1:09:bc:a1:b4:eb:0c:2e:92:76:25:38:b8:2e:
82:13:da:15:09:cc:f5:a9:2c:c0:23:24:2d:00:65:fe:29:70:
f2:79:30:1b:84:ae:51:01:c0:81:27:4e:b3:e8:1d:35:44:2e:
c6:e8:cc:94:00:5e:46:8c:c1:e9:02:c3:f3:9e:2f:d7:3c:51:
c3:ac:80:e1:9e:bb:ac:03:eb:19:87:75:ef:5f:65:16:68:4b:
3d:9b:49:f2:be:8c:be:1c:a9:0e:23:70:d1:f5:3e:4e:83:9b:
2b:b3:79:1b:ff:87:88:5f:86:a0:b0:6b:9b:2b:05:72:fe:62:
5f:7e:13:f3:30:c6:76:0b:f6:31:e0:b8:cb:e6:e8:34:b6:96:
a5:13:63:29:1c:ce:b0:ae:1c:55:b0:74:e3:b3:57:b7:a2:9d:
fa:5f:ee:be:6e:39:bb:d9:4b:92:24:22:16:f5:52:e4:80:4a:
98:44:bb:56:3e:76:0f:81:d2:5d:cd:8a:48:d7:27:4f:9a:b6:
5c:ac:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:48 2025 by rpki-client