Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: xAiuIyM6bgzo57FxA0Hpbh0zOY7OPo+kOJ7fum/kSHk=
Subject key identifier: 8D:18:C4:A3:43:D8:9F:AA:C8:01:9A:AB:09:EB:6E:2E:D5:B1:9B:4B
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 019768BC4D8B057D328C88A7E8F4C0BF518F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 0CED
Signing time: Fri 13 Jun 2025 10:01:00 +0000
Manifest this update: Fri 13 Jun 2025 10:01:00 +0000
Manifest next update: Sat 14 Jun 2025 10:01:00 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: 3ug3touroLnI1o0l8EeiP0PNLkBqyw6nX0eJeU+CDZI=)
2: jyRFM9_T_syhJNdrBbZtEXQjBxY.roa (hash: 3sN/6EgdGuf6mYlFqORSiJaf85S1hh85EE3f4pncjgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:4d:8b:05:7d:32:8c:88:a7:e8:f4:c0:bf:51:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Jun 13 10:01:00 2025 GMT
Not After : Jun 14 10:01:00 2025 GMT
Subject: CN=8d18c4a343d89faac8019aab09eb6e2ed5b19b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:c6:13:24:3b:21:3a:6d:69:d3:3e:d7:49:
7f:c2:46:98:16:16:eb:d2:3f:97:8b:fd:63:10:1f:
c7:6f:92:0c:99:52:cd:78:e6:36:fd:97:0c:5a:5f:
6f:1e:7b:fa:8c:de:ca:96:52:71:19:36:a9:81:03:
95:72:c7:b2:82:22:be:83:20:8e:f9:d9:7f:7a:2d:
f9:a3:d8:84:64:dd:0b:b9:e6:c3:54:23:08:00:90:
20:74:98:03:bb:63:d2:68:a8:73:21:a6:5f:91:5e:
73:8a:71:d2:58:b8:bd:0c:8c:96:fb:eb:92:c4:0d:
07:c6:b0:fa:52:bf:c0:5d:04:7c:3a:e3:1a:bf:5b:
d6:61:bd:95:c1:e1:aa:6b:79:b3:3e:88:a5:2d:36:
3f:66:ae:60:b2:f4:83:9f:09:fb:7a:70:a2:c9:06:
59:83:a3:f3:ab:f9:0a:2e:66:32:88:e8:a3:03:e4:
6c:1c:9f:ac:20:77:8d:e9:e0:d3:68:91:d0:fd:cc:
2c:c1:2c:51:fd:4a:13:84:e1:d5:1b:d0:b9:1b:6c:
87:fe:5e:67:75:a2:f2:98:91:a1:28:13:20:26:4f:
3e:5e:e5:c7:f9:67:74:48:84:6a:19:7f:6d:e4:b6:
55:47:9a:59:46:62:aa:9d:71:98:fb:32:4c:fc:48:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:18:C4:A3:43:D8:9F:AA:C8:01:9A:AB:09:EB:6E:2E:D5:B1:9B:4B
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5e:93:93:68:34:86:35:63:05:b3:18:c6:1d:35:12:3f:d5:
34:d9:9f:11:14:ea:e3:b8:9b:bd:25:df:0f:67:10:63:8c:67:
3b:b5:eb:e1:20:d9:d1:13:3d:81:57:08:6b:ff:61:4c:9a:97:
dd:fd:28:96:2c:e9:e4:e7:42:ed:8b:c9:5d:d0:a7:b8:9a:f5:
2b:ec:4e:a7:0b:9f:24:58:f1:ca:f4:28:43:de:1a:91:af:f7:
bd:c7:28:bf:40:c1:f0:1e:61:54:66:66:6a:17:a7:17:cd:bb:
73:72:8d:c1:b1:37:a7:38:9a:77:45:a6:60:e1:d9:3f:8b:30:
a5:32:be:dd:e2:98:80:72:fc:2a:f7:32:ae:42:be:a3:42:d5:
c9:83:2b:d4:6e:71:99:e5:3b:10:7b:43:d9:ba:ae:9b:8b:8b:
be:01:6d:8f:fc:57:50:e1:e1:db:0b:1e:1e:0f:9f:26:28:c8:
5c:77:05:ed:e7:e7:f7:f0:ad:38:ca:82:1a:81:1d:b9:8e:ed:
db:4f:5e:f3:7c:86:fa:a5:bb:5f:53:5a:b2:4e:ac:2b:f1:fb:
23:69:fa:66:1d:0d:9b:54:53:01:3b:fb:b1:94:33:a4:b0:bc:
0a:81:09:2a:86:bc:ac:55:65:4f:4e:de:d2:8f:12:f2:2d:b4:
85:16:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:54 2025 by rpki-client