Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: 8weDFYfHU69naFE6GqRE3RztbM8WuYk5bW295nx3eik=
Subject key identifier: 8B:35:9F:F9:FB:00:DA:66:79:2E:BA:9C:C3:89:F9:9F:40:A2:4A:F8
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019773AE0F08E609E1C6A1621E9A9C596A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 0FA8
Signing time: Sun 15 Jun 2025 13:01:16 +0000
Manifest this update: Sun 15 Jun 2025 13:01:16 +0000
Manifest next update: Mon 16 Jun 2025 13:01:16 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: 8QFP7uLgR+zIRSLTPSgpreMkg6Mz9ufTIKIqDCyyNUs=)
2: a7DppR8a_zPl6np7nOEfJXryakA.roa (hash: wU3AghxluRA4zWm18LLUP4eLKYWVDAXfgoTV1mFNROs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ae:0f:08:e6:09:e1:c6:a1:62:1e:9a:9c:59:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Jun 15 13:01:16 2025 GMT
Not After : Jun 16 13:01:16 2025 GMT
Subject: CN=8b359ff9fb00da66792eba9cc389f99f40a24af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:a8:3f:84:45:2b:46:d3:d1:e6:34:74:c9:
d4:72:5c:8c:1a:6f:e2:51:53:cc:30:bc:aa:7f:4e:
1c:50:28:a9:49:6c:50:90:06:16:1c:96:63:2b:14:
8d:d4:f0:90:ed:52:10:38:21:6c:3c:ab:e5:0a:4c:
31:20:fe:73:26:9b:c3:e1:e2:8d:b3:98:1a:aa:20:
52:61:d8:87:ee:c8:83:af:ec:08:d2:f5:13:0b:93:
83:ec:c8:ea:5c:4f:1b:bf:63:6a:87:71:b5:cd:f5:
75:db:81:ea:95:3b:39:19:7b:4f:cf:ac:e2:1a:1e:
a4:8c:75:1a:8b:00:85:d6:7b:37:23:30:39:ce:3d:
7c:2f:64:c7:6c:a6:8a:c3:d1:3e:19:3f:c2:01:a3:
01:27:fe:0a:df:fd:d3:06:92:48:b4:39:68:4e:ad:
f0:39:33:06:58:7f:b7:69:9b:e1:c8:4f:93:19:d8:
66:78:6d:31:ba:37:56:46:e2:3b:8d:6c:f1:ac:08:
6c:8d:8a:6e:95:35:15:e3:9f:4d:76:56:f8:1e:d2:
86:01:33:7f:63:6e:22:4d:5e:5c:74:33:d5:85:6f:
4e:ee:db:65:7c:c2:f4:7e:22:20:71:fc:2a:a7:1e:
98:e2:cc:c5:bb:75:3a:6f:80:8c:47:1f:68:ff:cb:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:9F:F9:FB:00:DA:66:79:2E:BA:9C:C3:89:F9:9F:40:A2:4A:F8
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:57:05:ef:ac:e9:bf:9b:28:af:0d:d7:98:bd:9d:3e:f3:
7e:a9:5c:33:cd:aa:8f:36:c2:6f:31:1d:b7:90:f3:a1:38:4b:
97:d4:1a:14:13:fd:4e:37:88:a2:19:99:7f:93:f0:d8:a8:47:
91:47:a6:c4:07:8a:cd:78:31:ba:6d:b5:9c:bc:9c:10:0d:84:
ff:96:55:57:c2:c0:d0:3c:15:4a:40:76:a7:d1:a6:ae:06:e1:
93:1a:09:01:5e:f6:15:1f:9f:7f:6f:e5:87:86:47:74:d7:ff:
59:b6:be:04:13:63:df:90:6f:0e:af:45:39:02:b3:66:e2:a8:
eb:6a:65:30:5c:e1:e5:25:19:a9:78:10:7e:55:7f:d7:e3:e2:
47:41:79:66:ef:38:37:a2:c5:77:16:ce:0a:7b:19:0d:2c:5c:
73:3a:13:be:1c:e2:7d:87:51:e1:4a:5c:d6:2a:0e:5b:a6:6f:
ea:4e:e1:30:d1:a9:48:10:a5:33:72:80:b1:50:fd:06:19:d7:
cf:70:e8:36:5d:7b:57:90:a4:31:1e:8f:c0:8d:dc:6e:de:cf:
ec:9a:a8:b9:82:c5:34:df:3b:f2:81:29:ba:5b:c3:55:54:85:
12:ca:b0:7d:f0:06:35:a2:65:e2:c4:4c:9f:a6:3f:15:5d:fc:
12:6f:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:59 2025 by rpki-client