Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: XYjMIgsU0Tpu90WQ/mzuk8ZvWzcYzM+eZh73be/QlYI=
Subject key identifier: 29:50:EE:AE:BA:42:3D:99:03:8D:E4:AD:E3:D4:A3:03:8B:63:3A:F6
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 01976C2B0443538FC5CE1A833DC422734B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 0427
Signing time: Sat 14 Jun 2025 02:00:47 +0000
Manifest this update: Sat 14 Jun 2025 02:00:47 +0000
Manifest next update: Sun 15 Jun 2025 02:00:47 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: D1AflpGOYxYdBIWat5woaWCIqRPcGfbu2PZPmER0cvY=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:04:43:53:8f:c5:ce:1a:83:3d:c4:22:73:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Jun 14 02:00:47 2025 GMT
Not After : Jun 15 02:00:47 2025 GMT
Subject: CN=2950eeaeba423d99038de4ade3d4a3038b633af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7a:3b:2c:cc:c7:ca:21:5f:f6:44:60:9f:cf:
10:80:b6:e3:56:3a:96:df:d7:ba:d6:6f:71:8f:fd:
56:95:6c:7d:a0:12:71:52:71:bd:3a:a4:9c:58:44:
3b:35:4b:c4:c6:d4:2e:f1:f5:1c:94:64:05:a6:2f:
0c:5c:d6:f9:5f:46:5b:70:89:ae:90:8c:e9:fc:65:
3b:bf:b4:8a:9d:bd:8f:e2:af:c1:c9:45:21:dd:66:
4a:28:0f:a7:22:4a:c7:11:ea:4c:15:00:f5:40:3b:
7b:7d:5d:cf:c5:a4:c5:da:38:b2:47:8d:44:e9:c8:
e1:c5:47:da:e1:e0:9a:e0:58:d5:5d:d3:9a:86:47:
b9:e1:b9:eb:b2:01:84:61:ad:52:1c:3c:61:1d:1a:
cf:4b:38:2e:2e:23:85:75:ab:20:a2:47:b8:fe:60:
70:db:08:09:c3:9e:26:78:f1:02:4d:40:de:dc:97:
37:9c:29:b1:9c:34:95:e7:dd:b5:c1:8f:06:05:4c:
72:fc:ab:c7:0f:d2:2c:c1:43:d6:96:b3:ad:56:9e:
e4:49:61:c5:a5:20:15:68:99:57:f7:34:b5:d7:40:
a6:7d:1d:d9:68:c3:53:0e:80:bd:58:b7:96:32:a9:
52:eb:47:c0:4a:ed:f4:44:26:44:f4:b7:dc:3f:f9:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:50:EE:AE:BA:42:3D:99:03:8D:E4:AD:E3:D4:A3:03:8B:63:3A:F6
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fc:a7:ef:e8:a8:66:ee:0a:c8:0e:e8:38:a4:0d:e0:57:d1:
ee:af:62:94:55:5c:44:dc:8e:21:b7:99:6a:24:26:72:a5:c5:
b8:dd:f9:d0:35:3f:a8:6a:9e:16:b4:51:11:1c:87:d5:1a:c4:
0b:a6:aa:c4:29:f9:f2:7a:76:a6:64:89:1b:69:d5:80:22:6f:
6d:36:d7:60:b3:eb:86:55:a4:6d:ad:33:ff:b5:67:e6:10:e5:
ef:12:3c:af:21:54:d0:7f:c2:7a:0a:cd:12:d5:5d:9d:94:e6:
d7:c8:cf:86:e6:b1:c2:a1:dc:cf:6f:2b:e9:da:cb:7b:80:46:
c8:f1:69:73:a1:6d:0b:58:4e:62:d3:b4:0c:34:1b:a3:e5:c4:
4d:dc:f0:27:7f:c9:df:1e:03:d1:0d:fd:0a:e9:32:78:4e:74:
db:99:64:89:b2:c9:63:2c:ca:cf:dc:3f:16:6b:22:a2:44:3c:
45:06:8d:82:19:34:19:47:db:44:63:a7:3d:db:0b:1e:7a:7d:
98:b0:9f:3a:04:7e:ea:4f:07:b4:f6:23:30:09:68:ff:82:60:
3a:19:8b:16:79:1d:9d:15:fe:4b:85:23:35:ce:ca:38:02:34:
a0:02:8e:3f:8c:e8:58:16:be:e6:4c:3a:5e:04:63:5e:ab:0e:
d4:ea:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:55:36 2025 by rpki-client