Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: M9GjKhm9x8U6WL3F9fw8FRlgGT9/0Q95u86iqJNTf1c=
Subject key identifier: 4C:6A:2B:A0:30:96:4F:0E:2C:66:C5:79:32:71:C2:AA:3E:9B:39:2F
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 01977151882380E6A1F450A597A0C27A55C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 036D
Signing time: Sun 15 Jun 2025 02:00:58 +0000
Manifest this update: Sun 15 Jun 2025 02:00:58 +0000
Manifest next update: Mon 16 Jun 2025 02:00:58 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: bcDn16dZIVUPyGaDltN+tZ/Hr9smeecJnEjYdQ0ZJfU=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:88:23:80:e6:a1:f4:50:a5:97:a0:c2:7a:55:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Jun 15 02:00:58 2025 GMT
Not After : Jun 16 02:00:58 2025 GMT
Subject: CN=4c6a2ba030964f0e2c66c5793271c2aa3e9b392f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:88:97:d9:f6:31:66:8a:03:59:e5:00:56:
87:7e:84:5d:57:2c:ac:cd:bf:5f:b2:91:2f:bd:81:
e0:59:63:49:78:7c:5f:68:38:44:75:42:6f:22:93:
ef:3e:46:b7:ff:9c:11:29:e0:47:6a:61:8d:48:bc:
cd:95:f0:33:40:e4:33:2f:de:79:53:4b:d7:f9:39:
83:96:07:a7:7c:fa:01:a1:ef:5f:18:60:56:24:57:
21:c2:4b:bf:7a:7d:37:75:a6:65:16:43:da:4b:94:
b6:75:8f:70:39:fe:72:c0:c1:c5:1c:2d:9c:4c:57:
73:5b:61:07:5b:8a:7a:22:65:73:76:c1:c7:de:36:
f2:36:c7:e9:58:aa:c8:39:e6:d5:ae:17:c9:f1:02:
f8:69:c8:70:b2:37:1c:9f:d2:4e:6a:19:bf:f0:39:
c1:bf:ae:22:b4:a5:ce:43:49:59:01:a8:f3:01:a5:
42:2e:32:f1:f2:75:72:2b:ce:39:5f:ea:10:af:5e:
5f:9d:41:df:f1:b8:0d:83:c1:96:c5:3b:65:26:a6:
35:59:3b:3d:98:b9:3d:d8:a3:f8:f9:73:df:62:fb:
b9:0c:23:5b:02:d0:8e:fd:80:95:18:8f:30:7f:48:
a4:d4:3e:e8:75:64:ad:fe:69:a1:4b:0e:33:57:60:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:2B:A0:30:96:4F:0E:2C:66:C5:79:32:71:C2:AA:3E:9B:39:2F
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:a1:77:73:48:70:9e:9f:b4:f5:4c:d3:2b:90:06:9f:c6:
85:74:c6:7b:b3:c5:4d:dd:85:e0:38:95:95:c3:fa:bb:6f:66:
e5:47:9f:24:33:3c:ce:68:af:e8:00:16:64:ec:7b:19:ff:45:
b8:0a:a2:dc:77:9e:b8:44:ad:0c:4f:cf:7f:ae:50:a2:20:45:
cf:d8:23:b8:8d:cd:38:da:ed:85:80:c1:eb:53:5c:ea:1f:fe:
a5:1d:4a:f7:fc:28:93:8a:20:a8:39:cd:f8:01:ab:3f:ea:7c:
4d:79:81:8d:bd:3c:d1:bd:1c:f6:d6:2f:9f:e5:ae:e9:d4:21:
21:41:54:9c:68:51:7d:fe:43:79:9e:ed:cc:48:70:54:3e:d4:
16:17:ba:1e:47:49:aa:05:1a:92:b0:ca:a2:c3:2d:37:d5:57:
ac:ad:42:f2:d1:2d:8d:f3:fd:33:a1:b2:8d:f9:18:1a:7b:8c:
b1:34:55:2c:6f:ed:46:ba:4c:de:61:4c:3f:f6:3f:eb:91:2d:
39:63:d9:31:30:20:c9:7c:50:62:3f:29:1c:18:46:d4:c5:91:
73:9a:e8:c8:9d:f5:2e:5d:00:ee:23:c2:88:c7:a6:3d:62:9f:
23:4e:75:3f:f3:0f:4e:dd:4f:04:98:6a:24:b7:fa:a9:dd:2b:
1f:2a:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:34:23 2025 by rpki-client