Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: lL0ns1is/wu2ioDRgrL5Dn7kwbMCo3PqDtUJRGsbOkg=
Subject key identifier: 94:D0:4F:FB:B0:8D:DD:7B:84:49:D9:70:0E:CA:31:D4:AD:27:BD:FA
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 01976F9A3A8E79B1F52EAE0CDBE2D6F13E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 1282
Signing time: Sat 14 Jun 2025 18:01:07 +0000
Manifest this update: Sat 14 Jun 2025 18:01:07 +0000
Manifest next update: Sun 15 Jun 2025 18:01:07 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: VUGSK7Y+063CIKDP+eHBTYHxpUOo/dztHoeaRxlxG6M=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:3a:8e:79:b1:f5:2e:ae:0c:db:e2:d6:f1:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Jun 14 18:01:07 2025 GMT
Not After : Jun 15 18:01:07 2025 GMT
Subject: CN=94d04ffbb08ddd7b8449d9700eca31d4ad27bdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:fd:6c:fd:b6:97:72:33:1c:4a:0d:90:8f:
60:2f:2b:1e:39:39:c3:e5:0f:94:47:06:46:5d:63:
16:72:d7:02:93:02:c7:1c:c1:13:28:e6:d1:58:a2:
a6:0a:e4:6b:bf:b3:a9:3d:e3:ce:d6:71:16:c5:6c:
e9:82:33:f6:36:c6:cd:7f:9f:ae:0c:fb:e5:29:d6:
b0:a4:63:41:bd:19:20:71:a9:1d:84:78:8c:8c:dd:
78:76:b3:8b:e6:bd:ea:d7:e0:82:03:e8:9e:b2:78:
32:2c:c9:9b:26:74:90:04:b2:6f:1f:5e:12:b0:e3:
d0:a4:7e:6b:3a:f5:58:35:25:ee:1f:2c:3c:ff:e3:
3e:8e:31:a0:39:38:8f:da:f2:98:f3:cd:81:ac:87:
2d:d0:f7:91:8c:87:70:3f:bb:b5:89:f6:c8:95:a4:
42:37:da:0a:b2:10:29:df:76:94:3f:c3:79:e0:82:
fe:fb:5c:91:64:b8:50:ab:2a:ec:df:7f:8c:2e:74:
12:bc:e9:4c:92:1e:12:6a:90:1d:ac:08:8d:d0:c2:
eb:75:22:d2:e7:02:9c:bb:b1:2b:7f:7b:a0:2d:ef:
16:9b:50:51:7a:86:d4:16:5b:72:b2:1b:b1:f1:e3:
31:07:98:09:b6:0e:e7:12:b1:e2:73:d3:27:8b:8a:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:4F:FB:B0:8D:DD:7B:84:49:D9:70:0E:CA:31:D4:AD:27:BD:FA
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6b:9d:e4:a1:e0:82:a2:00:f9:bf:bd:d9:7c:78:48:dd:02:
43:7e:d4:c8:8c:8a:a5:d4:cf:63:68:97:8c:4f:59:b7:56:6f:
a8:ac:ff:d9:20:8b:18:e1:59:e7:06:6c:6c:6a:98:c4:66:e2:
fe:41:be:a9:bb:ed:bd:16:b6:6d:cd:39:70:a7:db:e1:87:6b:
15:0c:d2:a0:95:44:f5:d1:7c:62:7d:d4:e7:9e:58:7c:10:46:
37:a3:67:2b:88:20:f2:31:00:09:91:ac:35:b3:16:85:55:89:
f1:0e:ac:7a:83:68:27:f8:77:2d:a7:95:1b:09:e2:33:1d:35:
51:b4:31:bb:0f:ad:ce:d3:8d:c6:30:ba:11:6b:25:1b:7b:6c:
91:82:9e:50:21:ff:a1:77:02:7d:ff:1a:c1:f1:3f:98:f9:14:
37:fa:e7:11:b0:92:bf:8a:5e:41:a3:ec:b9:0d:64:ef:ff:79:
25:0e:35:8c:ac:93:26:7e:9d:6d:51:95:b2:84:7c:ef:ad:4c:
a4:37:d9:9c:31:61:6f:d5:2c:6b:ee:c1:08:db:6f:0e:7b:e4:
48:c9:55:0d:b2:b1:91:71:22:a1:df:08:21:65:de:0b:0d:6a:
0f:74:82:9a:89:cb:31:48:7d:41:a4:8b:ae:cf:9c:c5:c1:12:
da:d1:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:48 2025 by rpki-client