Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: 3pgbr6P1nnkGiby380dgnOoYULRb2wSyOEHlN7smnAo=
Subject key identifier: 39:C7:5B:CB:87:A3:44:CA:B7:89:56:01:48:80:60:30:48:3C:6A:9D
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0197715107F516CE306725FA45A69FF840FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 02:00:25 +0000
Manifest this update: Sun 15 Jun 2025 02:00:25 +0000
Manifest next update: Mon 16 Jun 2025 02:00:25 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: hMmr0BkfwTn11UpCnpY5tUq3p2a34/kfHNXW0BqE9iY=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:07:f5:16:ce:30:67:25:fa:45:a6:9f:f8:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jun 15 02:00:25 2025 GMT
Not After : Jun 16 02:00:25 2025 GMT
Subject: CN=39c75bcb87a344cab789560148806030483c6a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:2e:4c:21:25:f3:3f:cb:1b:fd:60:02:a4:
60:98:78:92:ed:21:17:79:7c:59:99:98:07:dc:6d:
8f:db:20:c2:3c:4d:cf:cd:c3:07:7e:fa:48:1c:4c:
8f:44:77:49:a6:1c:3a:b3:5a:7d:5a:51:f7:72:12:
c5:42:36:4c:69:c1:be:6c:27:70:cc:28:ad:d8:95:
84:14:48:c3:72:5e:7b:b7:98:75:08:f5:d7:7c:ac:
21:13:ea:c9:e1:bc:e7:2d:1d:3e:d7:d1:62:d7:9a:
4c:9f:f9:c6:97:e3:56:33:da:f5:03:29:9d:fa:4d:
58:3e:42:d8:56:c2:d0:b4:b9:43:09:7b:73:e6:88:
69:db:3a:6e:db:be:56:9f:b0:7e:b7:c2:92:7d:c0:
61:66:e0:10:e9:0d:8a:88:e1:7b:d9:ca:7b:9f:bc:
ad:58:1c:d1:ad:2d:0d:51:a3:60:58:30:49:92:fa:
c7:ed:a4:08:75:cc:75:ed:17:b2:6d:82:a6:a4:79:
b9:5e:5a:6a:af:a5:23:ed:d0:6c:64:75:63:93:d6:
04:c3:e7:77:88:6d:a7:9f:76:0e:26:e3:2b:fb:bf:
e3:92:02:36:f5:10:22:88:14:6f:43:ae:33:85:74:
ff:d3:c9:9b:bf:5d:fc:01:61:5a:54:54:d3:33:0a:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:5B:CB:87:A3:44:CA:B7:89:56:01:48:80:60:30:48:3C:6A:9D
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:05:97:4c:f3:07:cf:09:45:c0:e1:55:e8:d4:a4:78:75:
08:8a:f0:26:ac:8e:0d:e0:4e:84:05:03:b4:df:f1:bc:b1:65:
d7:19:75:ea:ed:c5:b2:a1:8e:83:70:fa:79:80:69:36:06:e0:
ae:35:62:a9:9c:8c:2d:a0:fe:96:04:bb:d5:39:79:dc:29:f7:
77:2d:19:9d:fd:4a:f7:13:cf:aa:a3:97:1a:85:35:f1:05:04:
30:b3:f7:8c:ee:7e:2f:f5:c1:11:8a:82:d6:05:1b:d9:ac:c8:
85:39:0c:f9:e9:8d:42:c3:d7:ff:d9:b8:c7:5a:1c:43:00:5e:
3b:5d:9e:ad:a4:d7:bc:fc:93:cd:0c:c0:24:48:5e:92:e1:85:
0b:5f:cf:76:3a:ca:6d:1d:30:7a:4d:ae:9d:7b:ed:86:e6:75:
54:97:64:13:34:2b:72:65:a6:ad:5f:41:af:f0:b6:19:89:b9:
9e:6c:b8:a3:92:5c:b8:40:f3:ae:7d:8a:9a:02:fd:94:48:89:
b7:fb:95:fb:55:5f:e0:8a:97:8d:70:d9:0b:0d:e2:a3:bd:45:
b4:54:26:e5:85:e5:9d:0d:1e:d9:51:bd:b0:15:8c:30:13:f7:
19:c1:c8:d0:01:39:ee:20:63:78:77:77:86:16:54:05:f0:39:
92:dd:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:47 2025 by rpki-client