Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: VDzEFFRPvMqMxkw6mTl6J0Izi8P9h4gO/uLKWl+CDcU=
Subject key identifier: 82:1C:30:52:3B:A3:1D:DD:64:61:86:5A:79:D6:F8:2B:F5:61:08:BA
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 0197703F19D044D31E66C470BB94633B7099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 09FC
Signing time: Sat 14 Jun 2025 21:01:12 +0000
Manifest this update: Sat 14 Jun 2025 21:01:12 +0000
Manifest next update: Sun 15 Jun 2025 21:01:12 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: r4V73pJCwalZIaGCpxhbhICBIZRHSqRPbk38mGpi3gw=)
2: PMD1GlDLGk7gMbwF-9_w1YlsV4M.roa (hash: yxn0bsBf+yoGp2ebzQpXlOvhqAaQoPdbhmTGHyH8IaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3f:19:d0:44:d3:1e:66:c4:70:bb:94:63:3b:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Jun 14 21:01:12 2025 GMT
Not After : Jun 15 21:01:12 2025 GMT
Subject: CN=821c30523ba31ddd6461865a79d6f82bf56108ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:51:86:18:f1:a0:74:a3:ca:49:f2:30:09:
14:b8:7b:b5:c8:6e:e6:d4:10:e1:3c:2e:1a:ba:55:
78:f2:6a:3e:1d:2a:87:81:93:dc:56:83:50:29:91:
37:e2:c5:99:44:2d:46:17:34:52:81:53:62:bd:b2:
35:07:d4:e1:3a:ab:80:21:16:64:4c:30:b6:c9:0e:
e2:a7:5a:b3:c1:19:88:4f:e9:33:00:7b:9b:c6:1e:
ac:fc:dc:4d:4c:1c:41:71:87:62:a4:7e:87:ef:d3:
bf:14:66:26:c3:32:c1:cd:92:c5:0b:d9:57:af:8f:
5d:89:d5:c2:5a:26:a3:f2:a3:41:c7:e3:6b:51:84:
1a:d8:62:2a:83:e7:08:78:b0:71:68:f1:dd:4d:08:
f5:8f:94:8a:7b:b9:f1:a3:90:3f:ff:4d:37:3d:f4:
79:f7:f4:0a:87:13:09:dc:25:6a:12:a0:fe:7c:79:
ee:28:47:c2:9e:23:de:5b:df:f2:15:64:c0:a2:59:
1f:0a:b9:31:52:49:b2:54:a6:08:c5:80:06:f2:8c:
47:e5:03:1b:f2:f2:04:89:5b:eb:58:ce:ac:3f:24:
e0:1f:9d:49:75:f9:86:87:3c:02:c4:8f:17:d1:db:
02:63:5d:54:52:46:23:3f:75:e5:d3:64:f8:07:1f:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1C:30:52:3B:A3:1D:DD:64:61:86:5A:79:D6:F8:2B:F5:61:08:BA
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1b:e0:87:fc:c2:4b:28:68:5c:c9:57:d9:7f:3f:8c:b5:55:
dd:8b:60:c1:72:dc:d8:be:a3:92:56:7e:69:70:c8:c4:37:f8:
ea:ef:c9:6b:5f:d0:50:5b:df:74:7f:48:94:8c:56:db:79:18:
ac:53:ff:c2:26:66:6b:2a:ac:3c:8c:0d:92:50:60:92:c4:87:
da:27:02:19:cb:62:57:2f:f4:ef:80:15:ee:74:d7:e3:63:96:
93:56:ff:6e:b1:17:71:65:20:db:ae:ab:9f:15:d0:e1:b7:98:
47:19:b2:47:51:6d:38:95:14:25:4f:76:ba:71:73:31:5a:16:
8b:be:0c:a1:f5:8f:00:83:63:d3:1f:76:af:81:36:a6:df:cf:
e2:bb:d1:1a:61:b3:02:e7:33:f4:7f:e0:f9:18:81:55:87:93:
96:a6:8a:d0:35:44:7a:d5:48:e5:a6:3f:e6:c8:1f:37:9d:41:
0f:c4:91:9c:d7:0a:ac:f7:53:18:28:a0:51:18:2b:62:cd:cc:
34:1d:7e:0d:1c:a3:0f:c2:07:2f:42:57:be:48:24:b8:11:f5:
5a:38:3d:f4:65:ab:61:93:3f:54:03:f5:23:18:ea:6d:72:40:
f6:ff:35:54:ea:7a:3c:ba:b3:ed:8a:df:32:f1:33:46:7e:e0:
dc:d4:c7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:29 2025 by rpki-client