Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: JrPSVtLWbB2TgzA5oFZLaA/bs3wtNe2YpHdaco9qBWA=
Subject key identifier: 9E:D5:B3:3C:43:F8:D7:99:98:D4:F5:30:78:A9:91:38:11:18:BE:F1
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 01976929BE69F5AF7D3DA40EADAAC1885D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0C74
Signing time: Fri 13 Jun 2025 12:00:32 +0000
Manifest this update: Fri 13 Jun 2025 12:00:32 +0000
Manifest next update: Sat 14 Jun 2025 12:00:32 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: sntyQlksSNbeGG554VYqQXJ5lQJbvJWy2+AiUwnn4+0=)
2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:be:69:f5:af:7d:3d:a4:0e:ad:aa:c1:88:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Jun 13 12:00:32 2025 GMT
Not After : Jun 14 12:00:32 2025 GMT
Subject: CN=9ed5b33c43f8d79998d4f53078a991381118bef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:b7:ae:ff:13:c4:ff:0e:07:6e:a8:e2:aa:
1e:45:ce:0f:26:41:08:a3:30:0d:50:d9:e2:d0:47:
a8:63:1a:26:c7:6b:ed:f1:b9:1b:e7:06:82:20:c7:
9e:0a:5b:bf:69:2b:ab:1d:5a:a2:28:bc:99:15:97:
8e:b4:0a:a0:b8:ed:65:fe:27:9e:66:01:31:0a:a0:
05:bf:a1:28:f7:68:c8:91:25:00:fc:1e:32:d8:d7:
32:cd:c8:45:7f:a8:4e:08:ec:c9:35:1e:c6:a3:43:
c4:25:96:66:07:bd:8b:4d:60:50:38:0c:6a:7c:53:
95:33:f5:3e:35:22:60:55:73:e1:19:38:8b:c7:f9:
fb:c9:0b:1f:7a:a6:32:a6:fc:cd:ee:be:cf:f6:99:
a6:7a:61:44:51:81:c3:4c:dd:80:3f:19:ad:96:b3:
26:9f:cc:a2:46:46:b7:b4:72:4f:df:fd:78:bb:b3:
61:f9:cf:0a:67:4e:c8:b3:c8:d8:e9:0f:0b:06:2c:
10:0a:d8:67:70:20:d7:42:10:c5:55:bd:52:bb:e0:
2f:d7:0e:9c:2a:5a:82:88:42:c1:fe:cd:fa:88:58:
1c:82:fe:3b:0f:ee:ea:3c:01:3e:8d:89:e1:61:73:
10:14:ad:b0:49:e3:e1:2e:17:f9:c6:06:6d:ba:54:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:B3:3C:43:F8:D7:99:98:D4:F5:30:78:A9:91:38:11:18:BE:F1
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:eb:d6:ec:d4:b4:d7:6a:d8:18:bf:39:e9:28:6d:7d:77:48:
0f:e9:7d:f4:60:e7:26:87:88:44:b4:8b:80:d2:44:c6:ca:c3:
42:e0:be:1b:ec:b9:1a:71:14:28:9e:6e:e7:14:cf:46:95:5c:
87:82:03:af:58:35:67:db:5c:a7:9f:16:2e:1d:bd:5e:c1:22:
44:30:eb:b0:73:16:29:dd:29:77:d7:90:e9:0c:77:d5:ce:b5:
3b:d4:9f:c4:16:ed:50:dc:fa:17:e5:db:43:b3:a1:c1:02:62:
c7:55:1c:a3:a6:0a:91:3d:c0:8c:5e:9b:22:0e:e3:a2:a1:9c:
4b:a8:87:e9:8b:74:60:fc:e4:25:a9:c2:74:38:ca:03:e4:cb:
6c:d7:91:86:59:87:ff:1e:d2:0f:e6:10:e9:ee:e1:13:44:46:
e7:33:84:33:f0:1c:41:48:c0:3e:d8:f6:e6:75:ea:ed:7a:f8:
05:77:11:65:75:a3:e8:2a:82:6d:e3:4c:e1:d0:b0:2f:cf:5a:
13:88:05:8f:d8:47:e7:e3:30:28:bc:0d:d4:85:18:c8:44:37:
14:a9:d0:fc:39:22:62:7e:4d:95:13:0b:b9:23:1c:d0:02:2d:
b3:bf:49:ff:d9:89:4d:0b:f1:aa:73:87:5d:07:c5:21:43:06:
15:3d:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:27 2025 by rpki-client