Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: kUgNEIvkUt1+HhjE43eAEeLb7yhj/8Z9VdvggKAt4JY=
Subject key identifier: C9:4C:CC:5D:AB:A9:9B:0E:11:B0:65:2D:15:40:AB:1B:11:68:EE:7B
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 01977AC21EBFB1F92C73D123B9CF44A4E257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 0EE9
Signing time: Mon 16 Jun 2025 22:00:31 +0000
Manifest this update: Mon 16 Jun 2025 22:00:31 +0000
Manifest next update: Tue 17 Jun 2025 22:00:31 +0000
Files and hashes: 1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=)
2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: 39TqgCybPtIOq6rnFxvhQ5jNnqyD8j12DxbM3vVB6rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:1e:bf:b1:f9:2c:73:d1:23:b9:cf:44:a4:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jun 16 22:00:31 2025 GMT
Not After : Jun 17 22:00:31 2025 GMT
Subject: CN=c94ccc5daba99b0e11b0652d1540ab1b1168ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:26:1e:66:61:d1:0c:21:9d:9b:73:22:0a:
29:66:52:0e:3e:3c:d6:f8:bd:dd:59:da:f0:c5:4a:
c1:f1:b6:49:52:01:fc:bc:41:7b:d7:b5:10:a4:17:
20:3a:d0:91:84:2c:bd:17:ac:e7:15:45:fb:af:cb:
54:fa:bc:e6:09:2c:ee:5f:13:74:22:d2:7b:7b:eb:
26:f6:7b:c1:84:cd:40:40:8c:06:ee:ad:aa:32:66:
37:b0:d2:fc:bc:d1:7e:b9:e5:0c:7b:cc:1e:ee:82:
dd:3f:c0:5b:51:ed:1b:81:5d:d6:17:54:4a:51:16:
56:df:a2:cb:0a:16:6b:46:5d:75:96:7a:ab:c6:1d:
65:d2:00:c7:61:cf:c5:69:56:bd:6f:41:c4:72:f1:
46:c9:77:ab:87:38:00:ed:07:44:96:f3:80:96:b5:
a0:69:f6:ed:61:89:62:1a:3a:91:3a:23:27:c5:e5:
de:e9:80:f1:b0:d7:9e:11:d8:34:b5:c7:96:4f:52:
cb:b2:9b:72:18:da:5e:5a:41:cd:b0:cb:76:d3:af:
00:96:af:f1:f0:7e:bb:e3:9e:97:32:24:ea:bc:85:
13:bc:1a:38:16:e0:27:e8:17:6b:dd:05:5b:1a:cc:
8b:a0:dc:bc:27:ac:5a:42:a8:7a:75:f8:e6:f5:25:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:CC:5D:AB:A9:9B:0E:11:B0:65:2D:15:40:AB:1B:11:68:EE:7B
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b1:56:51:aa:cf:44:8a:77:09:34:d2:78:11:a5:6f:47:a4:
33:63:36:2d:16:5c:b4:11:9f:98:b9:66:35:eb:2c:cc:fc:02:
be:a7:be:ab:d9:03:f8:db:eb:3d:5e:2d:d7:b5:7a:26:42:31:
ce:c7:87:9f:95:61:16:70:96:f9:a1:54:eb:ed:3f:b7:0f:55:
70:0a:15:83:1c:b6:23:07:c1:82:b9:6e:97:14:bd:9c:0a:96:
27:43:16:bb:46:da:91:c8:ef:05:a8:be:ac:fd:44:16:38:e4:
4c:0a:62:6a:51:b4:67:ee:56:94:b0:47:d3:46:7c:33:73:12:
d5:d3:ec:66:03:9d:11:ab:15:71:c6:e4:aa:d0:25:ff:42:f4:
bb:83:9d:a9:b2:4f:82:aa:af:3f:ce:fe:17:76:a2:df:bb:87:
66:98:0a:70:a7:9d:d1:91:7d:08:49:67:34:18:1e:33:7a:38:
67:b1:eb:b5:1c:d4:eb:9e:af:34:32:f1:8b:fa:ea:52:6c:1d:
d6:a5:43:53:62:ff:d2:b1:1f:2d:f5:56:ce:65:04:d3:d0:89:
e6:03:04:b6:11:b0:47:2d:fe:e2:e5:aa:1c:53:9b:91:1a:a8:
03:b4:4e:45:63:f5:77:54:74:93:82:db:3c:2b:af:c0:36:05:
68:8e:c6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:08:28 2025 by rpki-client