Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
File: 3frtS0AyNuLKi-twkcug4GpUPQo.mft (raw, json)
Hash identifier: ZFgaImfKAYV0WGy4rkhr+xK52tuVrcC3cLDvl0/i0sw=
Subject key identifier: 27:71:54:79:EC:F9:F5:14:93:94:58:C8:85:30:A8:DB:06:C3:54:3E
Authority key identifier: DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
Certificate issuer: /CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Certificate serial: 01976D3D42BD5AC42C6EDD01DCE3E81A6F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
Manifest number: D2
Signing time: Sat 14 Jun 2025 07:00:20 +0000
Manifest this update: Sat 14 Jun 2025 07:00:20 +0000
Manifest next update: Sun 15 Jun 2025 07:00:20 +0000
Files and hashes: 1: 3frtS0AyNuLKi-twkcug4GpUPQo.crl (hash: zyMzSjD1mDKxT0TVYpwvabi2xEnoU0MtSHCnKzoGnOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:42:bd:5a:c4:2c:6e:dd:01:dc:e3:e8:1a:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Validity
Not Before: Jun 14 07:00:20 2025 GMT
Not After : Jun 15 07:00:20 2025 GMT
Subject: CN=27715479ecf9f514939458c88530a8db06c3543e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:90:7b:ee:da:ba:68:d6:30:e1:64:61:10:
bf:bb:eb:5b:b2:f6:55:8c:12:0b:cd:96:c7:db:49:
75:50:0f:e7:84:e2:ce:59:29:90:75:6a:ed:fd:f4:
01:3a:81:17:86:21:c4:60:03:fc:ff:09:b6:3d:81:
8d:bf:6d:ed:b5:47:90:46:5a:34:ab:26:08:f4:3c:
dd:71:d1:b4:99:8a:2a:c3:68:1d:ac:93:72:0a:e8:
f5:99:a9:1e:9a:a4:41:d5:a3:43:72:0c:fd:d8:41:
0c:7a:55:78:62:87:5a:93:93:4f:ba:96:1c:da:03:
d5:c4:77:aa:bd:8b:d0:49:29:a4:7c:01:9c:e4:e2:
93:cc:f0:d1:3a:d1:28:61:76:f1:6d:ea:aa:de:78:
29:d8:5d:74:51:c0:7c:f7:18:7d:e9:f2:20:df:8f:
ec:34:da:ef:39:c0:b1:f7:e9:1d:e9:df:40:aa:3b:
8f:55:ba:f6:84:0f:cc:77:49:96:e1:0b:d8:b2:00:
1c:b7:67:c9:d7:1b:ff:10:8f:81:2d:ec:2e:46:c4:
50:8c:28:ff:68:29:d3:3d:23:ad:0b:c9:d5:e8:83:
e3:a2:4d:eb:93:c0:7c:81:c0:f6:55:02:39:5e:40:
9d:36:12:47:16:19:f8:62:f3:a9:0b:89:24:27:ce:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:71:54:79:EC:F9:F5:14:93:94:58:C8:85:30:A8:DB:06:C3:54:3E
X509v3 Authority Key Identifier:
keyid:DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6e:04:cb:a0:51:ab:f9:9f:40:16:45:e7:28:f7:7a:86:ad:
aa:d5:7b:29:3b:d2:0c:26:a7:fc:97:18:fa:fb:cf:75:e5:82:
a2:ea:bb:d0:e6:84:15:4b:79:94:77:a1:1e:be:80:78:54:50:
0e:f0:69:dd:f4:3f:c0:2f:00:48:63:d8:f2:45:5d:c4:bf:b1:
79:87:7c:3d:b3:66:5b:0f:5f:48:48:3e:85:0d:49:d7:02:54:
5c:3b:a9:59:70:b9:3a:45:06:30:18:12:25:c3:cf:c8:63:16:
be:f9:da:c0:5c:eb:a2:93:9e:9f:e2:19:c8:cf:b2:5b:70:12:
5d:93:61:b9:e6:e3:f1:87:69:15:c5:d2:05:51:36:4b:b7:8c:
7c:38:1a:10:b0:5a:98:c2:ed:70:7c:31:cd:63:8d:fd:96:ab:
9f:7e:bf:b2:66:b8:77:c8:45:4b:4b:22:f8:ea:db:38:f9:07:
d8:50:0c:ca:93:d7:d6:4f:f0:20:04:72:9f:48:b0:92:55:87:
68:fa:c7:ba:8e:14:42:42:cf:43:5a:89:74:2c:47:6d:a0:d1:
bc:29:12:59:a8:c0:5e:e8:b4:7b:a1:7c:78:b1:06:24:f3:52:
7c:76:33:b1:9b:26:24:25:16:86:90:7e:5c:6e:88:5f:d6:b2:
9f:86:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:24 2025 by rpki-client