Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: /kCXuQ+K0cZ9h4o3mWE1y52m83aqsz0WSo++fFJc9z0=
Subject key identifier: 38:94:FE:3D:3C:B0:D5:82:E8:FE:1E:B0:8E:A8:1F:B0:45:FC:B4:0C
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 01977A1D5F038BE3627E5A863568DE2150BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0BF0
Signing time: Mon 16 Jun 2025 19:00:34 +0000
Manifest this update: Mon 16 Jun 2025 19:00:34 +0000
Manifest next update: Tue 17 Jun 2025 19:00:34 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: eB1fDHxUWl8pd2PqeswwLnCoRQ60lpexAyT3y1pqOUo=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:5f:03:8b:e3:62:7e:5a:86:35:68:de:21:50:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jun 16 19:00:34 2025 GMT
Not After : Jun 17 19:00:34 2025 GMT
Subject: CN=3894fe3d3cb0d582e8fe1eb08ea81fb045fcb40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:30:1e:58:24:5f:dd:28:eb:33:27:0f:99:
56:e6:3f:96:36:8b:c6:bf:f9:a3:cf:78:2a:a9:59:
9d:61:ff:91:25:91:a7:b5:61:d1:62:46:ab:8e:34:
48:98:4c:c5:50:d5:df:25:bc:44:26:2e:42:ae:fd:
bb:62:6f:11:4d:0e:40:11:04:0c:a8:a2:76:b7:65:
b1:a0:ff:21:58:86:f0:1a:06:32:43:62:81:38:5c:
2f:68:4f:94:82:a5:29:d3:12:8e:3d:7a:60:c8:b3:
69:5f:da:c4:76:2c:36:e3:ef:10:1a:1a:50:ed:2a:
ab:9d:04:a4:4e:bc:37:7d:61:0a:d3:0a:ca:60:1d:
92:b7:2f:8f:84:92:78:49:60:bc:a4:d5:b4:75:5f:
d2:b4:e0:9e:c3:63:0b:4f:ee:5e:3a:50:04:9d:a1:
ab:b1:41:62:45:86:11:6e:5c:32:a4:a8:1c:b9:3e:
ac:c9:c9:d5:3f:bf:22:28:86:47:29:20:75:23:e7:
96:fa:3d:90:ce:8b:da:13:5b:51:7e:d8:7d:8f:21:
70:90:d7:42:fc:5e:88:c0:47:20:46:3a:53:33:29:
73:11:4d:ed:e0:6c:3e:59:5a:20:35:63:d8:f9:cd:
95:e7:a2:c7:43:23:89:d0:08:ae:de:b0:7f:e3:7b:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:FE:3D:3C:B0:D5:82:E8:FE:1E:B0:8E:A8:1F:B0:45:FC:B4:0C
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d6:ec:5f:4b:7f:1a:06:08:b6:29:51:0b:04:2a:77:1d:a9:
79:0f:94:18:e7:a7:97:a5:3a:11:ad:8a:77:1d:c4:b3:ed:3f:
0b:3a:67:ca:28:3f:ec:c8:50:62:64:92:38:99:aa:59:3c:77:
44:59:4a:88:99:9c:8e:ca:d1:c2:3c:c8:b6:b6:63:6f:c0:36:
45:36:4c:34:a6:e5:11:06:dd:21:aa:7e:d3:95:54:e2:91:58:
70:d5:dc:c0:05:54:10:16:5e:c6:2e:2f:20:ea:69:2c:9c:3d:
eb:8a:20:78:3f:ff:b4:18:b0:29:d2:f5:97:e4:db:f1:f6:c0:
b1:93:9a:0a:50:64:d2:9a:bc:fc:6c:e1:98:1e:86:c0:c4:9b:
b8:c8:f7:89:c3:ad:01:74:bd:48:92:25:be:16:a2:70:e8:d3:
f3:f6:cb:bd:19:94:8f:07:f1:22:ef:f8:0e:11:56:b5:b8:82:
46:5e:dd:fc:02:03:10:18:2d:7f:a5:c8:53:c3:60:95:63:63:
88:02:57:6b:8a:0f:8b:41:39:8e:96:79:de:ba:36:06:44:98:
e5:75:81:7e:ca:1e:86:87:5b:47:60:ad:57:ff:bc:9a:cb:41:
99:cd:b9:3a:e5:37:15:82:ae:8e:05:d1:e5:32:30:5f:16:c3:
42:15:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:25:51 2025 by rpki-client