Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: yIwv/3Q1eULT3vTlFfEjfLP0aFEJkDy/+M8CsgQgVPk=
Subject key identifier: B1:E9:9A:3B:2D:69:B1:7C:FC:7F:25:0B:E0:7B:6C:FB:5F:4C:CF:60
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01976F9A194B16FC03725D2005578FF928BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 12CD
Signing time: Sat 14 Jun 2025 18:00:59 +0000
Manifest this update: Sat 14 Jun 2025 18:00:59 +0000
Manifest next update: Sun 15 Jun 2025 18:00:59 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: w7DKBnA6iORNHck2tnDd5Of88sI5+5MEMy9HZ9ihWH0=)
3: GBhjKbS-fcKacs4QagSv_dPJry4.roa (hash: z+hDh/AwHXwEXvEpHMWmz7Nj3R8e4I8tmHqYFBmRwRQ=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
7: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:19:4b:16:fc:03:72:5d:20:05:57:8f:f9:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jun 14 18:00:59 2025 GMT
Not After : Jun 15 18:00:59 2025 GMT
Subject: CN=b1e99a3b2d69b17cfc7f250be07b6cfb5f4ccf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:b4:38:a5:d5:1b:8f:8a:67:3d:9e:f7:45:
f5:14:a0:80:b2:20:23:df:a8:9c:d6:dd:e4:e4:6c:
06:33:65:58:46:a0:87:55:63:10:cb:a5:75:48:d8:
6c:20:9f:f1:38:00:07:f1:28:70:90:86:3e:df:32:
8e:ba:d2:03:ae:9b:3d:d8:ef:47:b2:72:2f:54:a9:
97:72:d4:73:e8:cb:f7:65:db:d2:ee:c5:24:3e:c9:
e6:b2:9e:97:dd:87:1e:4b:a4:72:79:48:b0:2b:7a:
cb:cd:be:4a:9c:99:03:63:72:99:85:6f:de:c1:fe:
64:02:0f:6e:21:be:b4:ba:20:89:28:2e:e7:f3:b6:
08:d3:fc:96:42:a4:73:76:01:c2:cd:1b:77:e1:8a:
2f:25:03:de:80:13:20:c5:00:0a:4e:56:c2:1e:e2:
bc:21:2b:4d:db:6b:ab:a1:ac:14:33:85:b7:78:00:
2b:47:56:42:2d:3c:37:bd:5c:9a:66:b5:36:4f:76:
a2:d3:c7:6b:a0:fa:18:6d:b8:12:6c:da:b4:d9:bb:
62:4a:95:d9:e0:83:91:2c:9e:5b:7c:e7:82:0f:96:
06:1f:9f:a3:eb:c5:0c:8e:3a:ca:3c:d1:b1:6f:17:
5a:e4:69:c0:5d:06:c9:c3:27:b0:d6:ff:a5:2b:33:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:9A:3B:2D:69:B1:7C:FC:7F:25:0B:E0:7B:6C:FB:5F:4C:CF:60
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d7:7b:75:21:f5:1e:60:0a:3e:6d:4e:8b:a6:d5:c3:9c:91:
08:c1:14:15:2f:63:68:08:86:ff:37:d1:6a:e5:d4:b3:d3:01:
83:5f:f4:fc:d1:d3:ee:1e:0c:74:9d:36:56:6e:64:b0:78:ce:
fb:25:c8:f7:cd:f5:7c:0b:6a:aa:f5:86:b1:1b:07:df:13:97:
3c:39:af:50:0e:42:e6:06:55:59:67:0a:cf:9a:89:08:0b:f7:
eb:34:d4:8a:d1:5f:79:18:15:94:b8:24:f8:0e:5b:7e:44:9b:
22:f4:3d:98:72:a6:85:28:19:a2:75:3c:23:e6:6c:91:11:53:
3d:94:d0:2d:80:52:6c:bf:6d:7b:b5:3e:dc:8e:40:40:1a:2f:
a9:af:fc:f5:d2:72:50:7d:e8:ae:fd:4a:68:ab:c1:bc:45:38:
26:3c:2e:dd:59:c5:84:5c:4d:1d:86:97:85:aa:83:4d:63:22:
54:2e:5b:25:4b:70:84:e6:b7:05:b2:54:5d:22:14:1a:89:34:
31:2d:f7:62:09:35:6b:04:bc:54:28:1e:e3:59:de:48:c6:75:
9c:18:be:de:f2:03:f9:fd:01:67:aa:be:31:5d:6f:c4:f4:97:
56:94:5d:0a:69:71:fd:99:5c:a2:bc:3b:1b:ca:17:8d:5f:93:
bf:dc:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:18:29 2025 by rpki-client