Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
File: 3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json)
Hash identifier: tPgs0TCLG7mfHkYGhdSR8FWQJu5Kv/IQFPmxrGbYfVk=
Subject key identifier: 83:8F:42:86:07:00:5F:2F:B8:9F:64:65:54:0A:10:1C:18:F8:D2:5F
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial: 019768BC62D7D96D3BB7361C6D12CBEEC836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
Manifest number: 88
Signing time: Fri 13 Jun 2025 10:01:05 +0000
Manifest this update: Fri 13 Jun 2025 10:01:05 +0000
Manifest next update: Sat 14 Jun 2025 10:01:05 +0000
Files and hashes: 1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: 5pE/NzKTIZtpFzDiiLQMLdv//xht8I0aTB3P+sG/28Q=)
2: 4YPbiAtEI4aIVwSYoOB9atG5l_o.roa (hash: 5G9M3UH6Px38TdWKWNsZTcUTomaq2supA1BUuPBFOUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:62:d7:d9:6d:3b:b7:36:1c:6d:12:cb:ee:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
Validity
Not Before: Jun 13 10:01:05 2025 GMT
Not After : Jun 14 10:01:05 2025 GMT
Subject: CN=838f428607005f2fb89f6465540a101c18f8d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:6f:13:81:bf:03:4a:6f:8a:ab:46:16:3a:
6f:5c:0b:c4:60:49:9b:9f:4e:28:84:ee:cf:49:57:
ff:2a:25:fb:31:3b:39:bf:ff:31:d9:65:70:94:c1:
f6:ca:38:03:b9:bd:3c:da:9a:fa:ce:0f:d1:29:64:
24:44:97:86:7f:8d:68:b1:54:bb:74:d6:0c:16:aa:
3c:9a:81:fb:5d:a4:b2:c6:ec:e3:ef:6e:53:3c:67:
4f:09:6f:a1:36:a9:8b:4d:91:53:59:9c:33:3b:13:
26:35:a8:af:39:e0:e6:92:e9:22:96:8f:1d:53:78:
e2:7e:a9:40:15:dd:c5:11:e4:89:a8:16:13:34:b5:
9b:68:de:c3:04:af:0c:ea:41:11:c5:83:4f:e4:36:
b8:58:3f:f8:cc:f5:11:d6:6a:e9:b2:e5:e3:6f:1d:
5d:c3:d5:f0:6d:e8:30:bc:3b:ab:89:c6:5a:2c:e2:
df:6a:22:e2:6d:77:d7:d3:1d:e0:5c:f1:2b:a3:51:
b9:bc:a1:53:b7:7a:d3:b0:89:25:c4:3f:5f:04:1b:
88:6c:31:c3:8c:e6:df:a2:58:97:30:12:2f:d7:4b:
98:55:ad:d7:7c:ad:30:21:28:61:35:f9:5e:71:67:
e3:4b:2a:47:57:77:aa:a0:86:63:bb:b0:29:20:73:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:42:86:07:00:5F:2F:B8:9F:64:65:54:0A:10:1C:18:F8:D2:5F
X509v3 Authority Key Identifier:
keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a5:ad:c4:34:f3:44:95:c2:38:7b:a3:f1:c9:86:35:15:09:
27:42:95:6d:fd:2b:cc:57:b4:87:ea:fd:88:79:e2:80:d5:f7:
db:70:4a:87:e4:96:86:86:ca:c4:f5:43:a5:1f:86:94:22:fb:
8b:af:26:b5:be:9e:ef:04:7a:1f:1e:ab:5a:25:8c:51:3a:42:
d6:94:87:f1:17:be:3b:d7:12:14:c1:46:8a:1d:c2:e8:ed:f0:
f4:ad:17:3f:7f:f5:2b:c2:39:d5:74:11:c4:e2:b1:ad:95:7f:
53:49:ea:c5:cc:86:53:10:59:f6:79:b9:85:db:91:38:1c:0b:
84:08:4b:09:ea:69:bf:9a:0e:2c:a0:62:22:7f:60:8f:9b:f0:
74:99:23:80:32:d7:1d:92:09:d3:95:86:f2:98:18:0c:dc:c2:
11:ee:92:1d:75:ca:e7:cc:3e:07:d4:bf:da:20:57:59:91:08:
1a:af:50:d5:5a:94:f9:2b:6e:0a:0d:15:66:92:d4:34:b9:e8:
ca:ce:ba:29:54:07:16:39:c6:df:75:90:e5:6b:79:c9:ed:47:
52:52:43:48:03:b2:bb:20:00:76:5f:d4:0b:51:e3:96:ba:29:
f5:a4:51:55:3a:53:37:2c:1e:66:46:43:58:40:3a:14:29:c8:
31:7f:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:56 2025 by rpki-client