Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: t4m1tkESkjw4zzYvv/GNhi9+grXnlXP80RExZdk7T1k=
Subject key identifier: 2F:55:CD:AE:A8:86:0D:06:E1:EC:6B:FE:6E:0A:49:11:69:CF:1F:AC
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 019874501383ADCAF4F2F5D2BBC0B405E94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0A8D
Signing time: Mon 04 Aug 2025 09:01:01 +0000
Manifest this update: Mon 04 Aug 2025 09:01:01 +0000
Manifest next update: Tue 05 Aug 2025 09:01:01 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: mZXu6AfYMgaizL9n3RfATIwJYfvWMr9d41NcOXA6tZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:13:83:ad:ca:f4:f2:f5:d2:bb:c0:b4:05:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Aug 4 09:01:01 2025 GMT
Not After : Aug 5 09:01:01 2025 GMT
Subject: CN=2f55cdaea8860d06e1ec6bfe6e0a491169cf1fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:15:48:1a:3e:56:0a:2b:a4:fe:c8:19:b9:
7f:55:ce:8d:15:45:45:90:91:35:8a:ac:09:08:ef:
23:fb:81:f4:d0:8a:04:34:3d:ab:4f:5e:ad:2f:ac:
f4:cc:30:10:7b:8e:79:95:0c:fb:c5:c1:00:92:c8:
7d:ef:fa:6d:cc:c9:8f:25:d2:12:a4:f6:44:9e:ff:
fa:d3:63:4e:7b:06:57:e9:ee:26:72:36:91:16:e5:
93:87:2a:2b:3e:de:1d:fc:50:67:da:b5:ae:f3:22:
d9:61:91:80:5a:aa:06:3a:1f:04:b6:b3:a5:76:77:
96:2a:77:b2:89:a9:0a:6b:89:a8:d0:a4:0a:e8:f6:
d2:11:b1:54:a7:b6:05:5a:69:68:6b:90:72:7f:e2:
cd:6d:48:6c:db:52:2b:4e:39:e6:a0:8f:f6:be:e7:
e6:26:75:83:97:b4:c2:2a:b5:b0:30:12:3a:8b:d3:
39:25:f2:0d:bd:1b:16:da:7e:12:f7:19:c7:bf:99:
6e:f3:be:9c:de:a2:90:fa:84:d0:5b:08:59:38:de:
c7:3f:13:f7:48:ae:ac:c6:38:0a:27:ae:da:6f:3f:
6e:7f:bf:30:12:a1:73:df:79:24:30:f7:46:31:0a:
b8:b3:e1:5e:d1:17:97:d6:fa:bf:23:d6:21:df:6c:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:CD:AE:A8:86:0D:06:E1:EC:6B:FE:6E:0A:49:11:69:CF:1F:AC
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:71:f1:a2:7a:ef:a8:cb:aa:74:7f:d8:ce:1c:b8:12:41:9a:
09:1a:19:d9:83:39:42:35:8c:02:4a:70:1a:c0:80:69:6d:67:
1c:75:b7:5a:d8:e1:10:cc:6b:b2:42:29:f2:38:cc:97:6a:56:
9e:cb:e7:7c:f8:f7:ad:a7:ef:14:ab:d4:a0:ad:44:c2:2f:cc:
eb:b1:57:66:c4:9c:e9:06:e0:14:d8:fb:b4:fe:e9:3a:33:fa:
e2:58:42:bb:91:e6:bd:ac:2e:fe:68:2d:49:b9:01:34:f7:9e:
8f:7d:ac:36:f5:e8:12:69:5a:b5:06:e4:18:24:3c:8c:57:71:
86:88:80:e1:55:ee:d0:87:9c:23:7f:c6:7c:e3:08:15:6b:fb:
f3:34:41:f1:90:c5:e2:05:26:4b:b4:77:0d:a3:7b:43:f1:ac:
75:6a:0d:d6:62:cb:aa:a6:d3:f0:65:5a:00:b6:6d:da:47:a2:
22:57:df:87:1b:93:19:1b:94:a4:2b:01:60:c4:a8:30:e4:d7:
d9:a1:d3:f7:f2:21:0d:bd:c2:b2:4a:59:f7:97:e2:ce:f1:64:
ad:50:4b:aa:1a:43:ba:02:83:9d:83:ef:d0:9c:fe:dc:08:e6:
7f:f6:20:2c:08:a2:27:92:ce:5f:bc:c5:c1:35:2b:44:e8:b9:
f4:35:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:03 2025 by rpki-client