Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
File: MH3iES3L0Gv7x-h_O_8jcinS0XM.mft (raw, json)
Hash identifier: IH4u96kRzNDeT5aQIHP9mkEo0YhJeghpNZ4XHSPCtW0=
Subject key identifier: FD:83:67:35:B1:A3:62:57:48:0C:83:FA:50:1C:A3:C8:24:C7:EA:7D
Authority key identifier: 30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73
Certificate issuer: /CN=307de2112dcbd06bfbc7e87f3bff237229d2d173
Certificate serial: 0198808B4D149071CA864A51F80E4E994869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
Manifest number: 0151
Signing time: Wed 06 Aug 2025 18:01:09 +0000
Manifest this update: Wed 06 Aug 2025 18:01:09 +0000
Manifest next update: Thu 07 Aug 2025 18:01:09 +0000
Files and hashes: 1: MH3iES3L0Gv7x-h_O_8jcinS0XM.crl (hash: uikuLLTbHQtJK/Z9N6DGs6fXmq41wUkh/z9brAXBZlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:4d:14:90:71:ca:86:4a:51:f8:0e:4e:99:48:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307de2112dcbd06bfbc7e87f3bff237229d2d173
Validity
Not Before: Aug 6 18:01:09 2025 GMT
Not After : Aug 7 18:01:09 2025 GMT
Subject: CN=fd836735b1a36257480c83fa501ca3c824c7ea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:6c:4e:f7:3f:e8:f2:f3:71:8b:31:b5:a7:
d7:ab:43:fd:61:8d:09:8d:2d:6a:c4:d7:f3:2a:00:
2e:2e:85:7c:de:25:74:2b:94:18:ba:70:19:eb:b0:
40:94:86:f7:32:3a:9a:93:30:a9:c9:02:18:ca:cd:
71:7e:4d:94:3a:ca:c1:4f:54:12:4d:52:a8:53:25:
b5:23:9a:89:99:f1:0e:0b:29:a3:df:82:ea:82:49:
07:d0:3d:31:db:c0:08:15:a3:d6:e5:6b:8c:8c:dd:
e5:56:ff:84:01:3c:6e:b2:9b:62:4f:5e:15:7c:d9:
21:d1:26:e3:95:f6:31:6c:0f:5f:36:f3:c2:5e:d9:
2f:59:ad:d1:cb:8b:1e:0e:72:ee:8d:4d:27:60:7b:
3c:e2:c3:7c:90:5c:3a:76:84:ff:dc:a0:d1:f0:dd:
e2:a8:a7:0e:d8:e5:1e:c9:ac:ab:08:dc:8b:5e:67:
f4:c6:ac:55:ba:fc:02:9f:69:0f:28:fb:e5:94:4c:
31:73:3d:6f:21:44:bf:09:d1:1a:d4:b8:a2:ea:a6:
e1:8b:ed:bb:31:19:18:e5:cc:df:04:33:66:58:a2:
e7:0f:63:48:62:18:20:88:a3:6e:73:db:c9:cc:04:
de:90:7c:50:00:57:41:83:75:87:23:5c:f6:88:dc:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:67:35:B1:A3:62:57:48:0C:83:FA:50:1C:A3:C8:24:C7:EA:7D
X509v3 Authority Key Identifier:
keyid:30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:99:ec:4f:f9:63:50:c8:54:78:d6:ad:9e:49:76:4c:d7:
16:7d:aa:58:de:b4:ad:af:41:72:b0:f2:65:f9:4a:ad:61:10:
86:3d:48:09:cd:25:a2:35:4d:16:b7:89:48:66:eb:c3:03:45:
e3:c1:fd:71:9e:d0:97:dd:69:31:23:7a:12:2d:35:81:ad:bb:
b0:bc:c8:38:69:1c:c1:2a:51:e4:16:df:1b:3d:61:5f:f9:82:
75:29:c5:22:a9:da:f3:2d:8d:53:81:40:19:53:31:22:f0:7b:
01:41:4a:a4:5d:ac:8e:27:0d:40:24:77:98:21:cd:7e:36:5f:
ed:e3:6b:30:81:4f:aa:90:58:71:b4:0e:b8:68:80:4a:7a:d0:
fb:ac:3a:37:4c:fb:43:db:0d:7f:19:e9:56:fe:14:c6:55:50:
f8:a7:ca:df:8d:e0:07:f5:ce:c1:fb:a5:d5:df:2d:e1:3f:61:
21:35:23:65:a5:b1:53:b2:9e:a1:b5:e2:b4:b6:af:9d:56:7f:
9c:2b:af:dc:dc:6b:44:76:d2:fa:fc:e1:33:c6:c8:31:81:80:
38:8d:f7:56:8c:47:bb:33:67:3a:15:a9:5c:e9:5d:2b:aa:bc:
d8:58:67:1a:57:07:b4:bd:9a:0f:07:2f:12:cb:8a:94:24:8a:
52:8a:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:28:51 2025 by rpki-client