Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: 0g4NAmT8XhOwwP0tFXkVsr+Pao/fs+AQDl/U0Gx96tI=
Subject key identifier: 0A:F8:B6:F6:6C:74:CC:DD:AB:95:4E:1F:0C:87:2A:24:54:56:00:25
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 0197884667B5E1177001C898AF6B71276979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 14F2
Signing time: Thu 19 Jun 2025 13:00:04 +0000
Manifest this update: Thu 19 Jun 2025 13:00:04 +0000
Manifest next update: Fri 20 Jun 2025 13:00:04 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: cOERP8Fb3J3wFvSyhigMkOntVoOB9d+hAFKMzDoOdZY=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:46:67:b5:e1:17:70:01:c8:98:af:6b:71:27:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Jun 19 13:00:04 2025 GMT
Not After : Jun 20 13:00:04 2025 GMT
Subject: CN=0af8b6f66c74ccddab954e1f0c872a2454560025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:f6:5c:9d:17:66:af:31:88:13:34:68:54:
29:4f:9c:a6:95:99:75:60:bf:db:33:2f:73:8b:2d:
a7:8d:b8:5b:fd:08:77:6c:a9:b5:7b:92:99:1c:2a:
c3:25:20:02:a6:92:d0:6b:e3:ff:bc:0d:4d:87:2f:
c4:f3:40:72:cc:d3:57:6e:ed:1d:03:ff:e5:f9:1a:
d7:aa:67:48:90:66:21:91:0a:13:9a:10:c1:f5:08:
f6:9b:7f:4c:c0:99:89:43:e9:76:a3:96:73:8b:aa:
8d:e0:a5:99:be:45:57:ad:7a:b0:3f:57:3a:b6:2a:
7c:e1:06:0e:82:7a:44:e9:4d:d6:57:6e:d3:86:95:
6d:1b:47:85:fc:44:c8:29:77:ce:9c:0e:2a:31:f7:
21:ad:ba:25:12:8e:94:8f:8b:7f:b0:d6:18:18:f0:
fe:39:fc:7d:80:35:f7:d9:17:72:21:8c:4a:9d:f3:
da:7a:28:12:42:05:d5:9d:f9:b6:3e:5a:41:c5:94:
10:53:0a:55:b0:c9:29:9e:ae:75:64:fb:dc:09:d9:
a6:3d:cd:f5:72:ba:92:8d:4b:f6:34:66:88:5c:ea:
73:15:95:41:82:b2:d6:56:5e:49:a1:eb:43:12:21:
20:df:d4:a7:5f:ee:ee:b3:b9:d2:21:fc:54:40:b3:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:B6:F6:6C:74:CC:DD:AB:95:4E:1F:0C:87:2A:24:54:56:00:25
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ae:11:ff:09:f3:b3:af:46:67:51:2d:22:3d:f4:b7:a4:78:
f1:ad:73:5f:5b:b3:97:83:8a:a4:ff:af:bf:be:cc:56:16:0b:
34:90:a6:d6:b3:64:48:92:c2:6d:8f:75:47:c3:c6:2c:af:43:
ae:63:29:15:a6:4a:7c:05:a6:97:9d:d2:01:22:5d:5f:36:8b:
78:9a:f4:09:b8:30:c1:38:7f:26:c5:8a:8e:59:72:e8:9f:02:
07:b4:09:94:15:f0:dc:9a:34:32:75:3b:0b:3a:84:5a:3c:8b:
89:db:f4:43:2b:69:a8:72:85:59:e5:67:ae:2a:11:97:82:0b:
4f:d4:f3:da:a2:00:5d:3c:05:5f:cc:6f:67:ee:d2:99:7e:1e:
04:df:08:c7:8d:4b:4f:fb:e6:06:71:e2:90:8f:f4:84:b9:db:
87:41:d8:51:c0:b9:f0:c9:e1:34:02:79:16:30:48:a0:ef:16:
80:b4:c5:73:3a:18:f4:20:21:d1:b3:de:18:55:9f:8f:1b:63:
a7:e7:1f:cd:1f:87:5a:ec:79:37:ea:69:8c:61:1d:9b:c9:d3:
b2:d8:96:ec:f9:9d:e3:69:ae:fc:1d:d3:40:a2:c0:6d:19:f3:
3b:34:9a:3c:31:dc:a8:45:6c:53:5d:7b:4b:75:5b:af:a1:a5:
a8:dc:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:09:52 2025 by rpki-client