Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: 7K58hLBV2A0SLS9LgYrz1wNKZtlpYy6Gdz9eqebwsS4=
Subject key identifier: D8:44:79:8D:EB:89:63:49:59:11:26:97:88:2D:91:7D:13:2F:6F:FC
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019769CEB11DE867B1C6352EBC6F44F8AB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 02C0
Signing time: Fri 13 Jun 2025 15:00:42 +0000
Manifest this update: Fri 13 Jun 2025 15:00:42 +0000
Manifest next update: Sat 14 Jun 2025 15:00:42 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: Qv2CnbZITYq8fm2Ul/flrIg10/qKPQ3gv6V1NZu0hlo=)
2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:b1:1d:e8:67:b1:c6:35:2e:bc:6f:44:f8:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Jun 13 15:00:42 2025 GMT
Not After : Jun 14 15:00:42 2025 GMT
Subject: CN=d844798deb89634959112697882d917d132f6ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:c8:53:39:34:9e:76:f0:94:0e:1a:b6:60:
ff:b9:2e:45:22:34:92:41:c5:f6:43:4d:46:7a:7c:
5d:05:37:c4:a8:50:6a:4f:b5:08:ff:09:86:6b:fd:
60:4b:1c:70:23:80:99:72:86:8b:56:21:e6:35:6d:
ca:9c:3a:cc:ed:d9:7c:89:32:a0:9a:86:ce:e1:8d:
72:9a:82:cf:13:a2:80:ce:00:8b:00:1d:dd:9f:88:
04:73:66:88:94:b8:78:ec:63:1e:78:88:a1:64:69:
ac:da:a0:a9:af:2a:36:14:1b:1a:56:a1:82:ac:17:
1c:3e:72:a1:99:71:a3:41:2a:5a:73:b8:d5:b1:28:
ad:41:32:9b:46:c7:9b:ba:00:66:61:d4:dd:07:eb:
62:6f:e0:30:fc:19:3f:81:48:a2:26:6c:bc:01:f0:
0c:d4:01:d1:23:b3:33:ab:f5:c3:1d:dc:8c:6b:b4:
aa:8d:50:17:8a:5a:ab:b3:66:ca:7f:d5:df:89:2a:
50:48:74:84:5c:29:cd:e1:23:c5:28:9d:ae:92:e1:
72:e2:8e:d8:79:7b:9c:03:c6:1b:f7:53:9f:17:cd:
05:87:e9:8f:87:4b:7e:d2:29:99:10:63:90:1b:fb:
91:7b:6d:5f:a1:a7:43:66:53:3f:61:6c:6a:d8:3f:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:79:8D:EB:89:63:49:59:11:26:97:88:2D:91:7D:13:2F:6F:FC
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:92:2f:c1:d4:3e:ee:da:fd:ea:c1:06:db:b0:d4:fb:1a:fa:
e3:54:e1:d4:c6:94:cd:d1:2d:dd:36:81:d6:a9:3e:b2:9f:62:
eb:1b:1c:cd:68:ba:a8:c4:b8:f0:a3:01:8d:42:fe:1f:74:94:
e2:45:15:dd:e4:36:ad:85:e2:0f:d6:fb:a7:a8:3d:5e:ae:50:
0f:57:c6:69:4e:77:0d:ff:b9:c7:2e:79:10:5d:6b:04:5e:e5:
f6:70:a1:f6:3a:17:a1:7c:75:86:99:6d:bf:78:b0:13:74:01:
28:77:cf:a1:57:21:1d:4b:a9:50:90:94:7e:cd:72:62:a9:c0:
85:f5:56:cd:1c:48:51:c0:3f:f6:dc:11:b8:13:66:19:c1:dc:
f0:93:29:9c:29:98:bf:c4:c1:e7:fc:2e:69:27:33:ba:ee:5b:
22:e5:10:4d:47:b8:24:40:38:51:5a:16:f1:d4:ce:c3:49:01:
e7:8b:3d:4a:e0:b5:75:ca:22:89:c9:13:6b:ba:bc:a6:9b:02:
76:48:05:3e:bb:a1:e5:cc:36:11:34:7e:48:a2:e9:37:72:1a:
e8:4e:4f:f7:f0:4f:0e:e8:a6:85:a1:b1:9b:2f:3b:0d:01:83:
a1:2e:9f:3a:4d:b0:0c:b8:1d:ab:ea:59:95:93:61:0e:50:dc:
ee:d5:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:03 2025 by rpki-client