Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: C/HeeWoJSYiGnqip3cbkp27QtXP57DIxn0rJfi5+ifw=
Subject key identifier: A8:D3:9F:1F:F9:9F:82:94:24:F3:FE:02:98:67:45:37:08:C9:B5:0C
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 01977E313A7B30CB16608BE4A5AC2E8BAE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 08BE
Signing time: Tue 17 Jun 2025 14:00:44 +0000
Manifest this update: Tue 17 Jun 2025 14:00:44 +0000
Manifest next update: Wed 18 Jun 2025 14:00:44 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: IBVAmMJ0XXTHFn4E+6oLrs3fzLZZ9f2ckM3RE/E+01o=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:3a:7b:30:cb:16:60:8b:e4:a5:ac:2e:8b:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jun 17 14:00:44 2025 GMT
Not After : Jun 18 14:00:44 2025 GMT
Subject: CN=a8d39f1ff99f829424f3fe029867453708c9b50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:7e:2b:6b:94:b2:57:c6:01:83:ff:a1:05:
5d:8f:12:5b:6b:05:85:cd:9a:d1:69:aa:7f:1d:b0:
d4:54:bf:e8:2b:9b:79:6c:48:d8:2a:fb:6d:2d:dc:
f9:f1:84:a6:6f:9b:fb:d4:3c:b6:31:e2:c7:44:9e:
7b:7b:ce:71:33:f5:86:81:ba:dc:c4:ae:94:89:bc:
7d:d3:e4:c7:01:9d:af:3b:f8:03:00:b0:5a:2b:1a:
74:c5:88:8b:8f:99:ae:4f:2e:d4:cf:83:36:dd:54:
b5:32:67:61:83:84:d1:08:3e:07:7d:ed:9e:6e:01:
a4:d1:a3:ed:76:e0:4d:52:e5:a8:79:b1:c2:83:0e:
f2:2f:d8:39:82:42:ef:7f:79:bc:72:6f:d8:09:95:
e8:6d:34:56:3d:70:c5:3e:07:83:07:ba:03:94:15:
bb:13:71:f8:d2:ba:ec:9e:23:01:fa:44:8c:b1:97:
1f:a2:af:e1:87:57:37:e6:9a:00:a9:ba:89:b3:25:
09:0d:69:8a:db:58:a0:aa:c3:26:04:4c:5b:db:57:
5c:b1:df:43:99:0f:52:2f:7c:1b:2f:64:a1:2f:01:
23:e5:67:5c:73:51:d5:9d:23:b9:4f:4d:7f:d7:6f:
1e:e3:59:25:75:24:f3:02:1e:ed:43:12:f0:fa:66:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:9F:1F:F9:9F:82:94:24:F3:FE:02:98:67:45:37:08:C9:B5:0C
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d1:39:2b:6a:79:7a:3d:59:ec:e5:c5:0b:58:31:68:82:dd:
de:74:84:2e:65:1d:f1:44:98:12:7b:e9:ee:6c:1f:0a:e2:9e:
8b:54:99:53:ff:6b:6b:fc:db:8d:ac:21:bf:ce:00:4b:63:f8:
6d:35:43:2a:48:94:da:e8:b9:8a:e5:63:76:b6:c9:6f:b7:ad:
06:13:1d:09:ab:ad:d1:6e:33:91:be:3b:dd:53:60:c5:73:dd:
cd:37:92:92:83:a5:b8:af:6c:f2:03:af:3a:7e:f5:49:bd:9f:
05:3a:f2:01:00:bb:91:6e:dc:8b:63:00:53:1f:b7:29:77:dd:
8e:46:3f:6f:b0:e3:11:40:5f:c4:0d:1e:22:b9:18:7e:85:80:
b8:57:21:37:39:59:4f:5e:21:f3:e2:0f:87:a9:f3:a9:5e:e0:
32:2b:43:fe:b1:2b:5f:8a:bb:e9:8e:ac:6f:09:88:46:fc:cc:
9b:e4:58:42:e3:f3:f5:3b:dc:2c:b1:73:61:f6:b2:74:f9:31:
97:7b:91:3b:f4:d3:94:e8:a4:24:ec:d3:1f:e1:75:1d:d2:cb:
ad:86:d9:5d:b8:3e:87:3e:64:fe:0b:5a:8e:48:a7:4c:6e:8a:
ca:78:7f:e8:fa:a2:93:63:99:6d:78:e8:71:6b:ac:73:6a:9c:
de:42:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:51:33 2025 by rpki-client