Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: 1PTmitRkFg8Cajlm9gp6kBb/8UZCI3GkmhLuZPfXKek=
Subject key identifier: 92:9A:92:41:17:60:61:12:F3:76:B1:AC:FF:65:AC:5F:24:8C:35:2F
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 0198936CE72F3DF136134BE1B96F5CEFE6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 046C
Signing time: Sun 10 Aug 2025 10:00:44 +0000
Manifest this update: Sun 10 Aug 2025 10:00:44 +0000
Manifest next update: Mon 11 Aug 2025 10:00:44 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: F8VouDWYEzhv0Z0Sbg/L7uJiyGCU5bzvyTK/LD9ynC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:e7:2f:3d:f1:36:13:4b:e1:b9:6f:5c:ef:e6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Aug 10 10:00:44 2025 GMT
Not After : Aug 11 10:00:44 2025 GMT
Subject: CN=929a924117606112f376b1acff65ac5f248c352f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:90:cb:40:db:01:7a:e5:20:a7:5e:f6:73:
c6:57:e6:22:77:cf:17:46:d7:c8:6e:ac:89:14:d0:
c6:0a:66:10:81:3c:54:13:a0:4a:ce:0a:a0:c4:77:
59:6a:27:d4:17:32:77:04:4e:13:c5:a0:7f:40:44:
e5:2a:de:ab:92:5c:4e:fb:ac:4b:45:f2:37:b8:64:
c9:91:98:3d:7a:dd:fa:ef:76:f6:23:8c:a6:2a:84:
77:ad:4c:ed:b9:4a:3c:74:64:d2:a3:df:f4:d8:97:
f6:a2:f0:20:5a:e3:7e:65:84:5c:9e:78:1e:05:fb:
ac:43:7c:2f:14:20:d5:ff:08:82:e4:dc:34:02:cb:
3e:d7:ad:4f:14:fb:27:75:2b:b8:d6:fb:62:af:1c:
d7:c6:74:e1:7c:57:c7:4d:87:c7:52:4c:45:25:30:
83:0b:a0:45:12:21:72:db:66:19:60:da:e8:bd:0f:
1a:f8:03:ea:31:f2:2d:5a:cc:4d:f5:ff:ce:6b:a9:
0f:53:3d:6f:05:92:fa:90:e9:56:f6:a0:09:73:cc:
ea:f2:d5:19:1e:e3:36:61:f5:17:06:4b:e3:63:ac:
7e:e5:2e:49:90:68:d5:17:b2:0d:8c:ef:01:0f:61:
da:31:a5:24:22:53:57:fa:54:64:9c:4c:ca:4f:55:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:92:41:17:60:61:12:F3:76:B1:AC:FF:65:AC:5F:24:8C:35:2F
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c2:68:15:e3:df:4a:e8:78:7d:b7:98:23:c1:d9:cd:7e:71:
69:88:06:f0:7e:9b:98:d6:72:f0:cc:7f:46:2f:95:36:50:40:
84:3e:57:8f:7c:46:03:18:f7:6d:a1:c4:28:04:d9:ba:47:9c:
67:4b:12:05:5f:c2:ee:3b:80:64:11:d7:f2:cd:e9:aa:96:88:
64:d0:17:08:40:d1:f5:8c:79:69:41:60:57:b2:ed:63:40:66:
90:2f:ba:97:2c:fe:8f:30:e4:75:8f:0f:38:b0:9b:aa:7e:5d:
ea:e6:ed:28:a3:83:cd:fb:6b:7b:35:0c:71:1a:f5:7b:47:9f:
3d:ab:e3:d2:7a:d0:0f:05:3b:a9:ee:9f:57:db:2f:d0:e0:dd:
cc:5e:c2:2b:f2:48:a0:2c:ed:35:25:18:4b:92:f7:19:59:90:
7b:7b:8f:20:0b:01:68:7c:11:48:b5:96:ff:d1:1e:27:f4:25:
ec:ed:fc:26:8c:ce:e6:39:f1:d8:f4:7c:4c:95:05:87:94:1c:
fe:66:2c:5b:3a:49:73:d7:be:43:63:73:d5:ca:69:02:60:32:
3e:59:28:b7:c9:4f:ba:ae:0b:0f:93:e7:fa:98:fa:19:8b:47:
25:e0:45:d9:f3:38:cc:05:ca:ed:00:b2:57:9d:89:eb:92:05:
3c:09:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:32 2025 by rpki-client