Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: 2FK+cl9enA4ib29AO289qtlg/u07JNgrG6t7PJC7VyU=
Subject key identifier: 4D:16:5F:32:71:0B:8F:8C:DA:9D:44:F3:78:6F:72:48:EA:98:2E:0D
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019768BC0075AC90C9AE08B79B8054791C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 051F
Signing time: Fri 13 Jun 2025 10:00:40 +0000
Manifest this update: Fri 13 Jun 2025 10:00:40 +0000
Manifest next update: Sat 14 Jun 2025 10:00:40 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: 4VcOE0CK6at6hbZ+wXFoqqE2c79ADIDoFlloE8LkHA4=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:00:75:ac:90:c9:ae:08:b7:9b:80:54:79:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jun 13 10:00:40 2025 GMT
Not After : Jun 14 10:00:40 2025 GMT
Subject: CN=4d165f32710b8f8cda9d44f3786f7248ea982e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:d9:65:5b:58:f9:f6:66:03:43:3e:d5:20:
ca:04:e9:72:3e:6f:9c:39:68:21:f3:95:35:1b:25:
8f:cd:b9:1c:47:94:da:c8:55:98:e1:92:16:62:72:
93:c3:cd:bf:a9:f2:c7:20:36:7a:71:b6:0b:13:3a:
0d:ee:e7:6f:55:68:47:11:f9:8b:a7:34:d6:92:c9:
13:75:11:ab:2c:64:b4:02:c5:5c:e4:79:2f:9c:df:
eb:4c:c1:77:5d:c6:28:c4:78:93:68:14:a1:97:d4:
0a:8c:c0:a6:4f:fd:90:75:ac:c9:39:16:de:30:cd:
9a:2d:ac:15:aa:8b:8d:8a:73:c2:0f:4b:d0:a5:6e:
41:e6:57:0f:85:1c:34:b2:8a:d5:22:3c:e8:1d:6d:
5a:6e:ca:a5:5a:df:81:07:60:cb:2d:38:dc:ca:2c:
4f:e2:25:53:6d:3e:06:99:ac:a4:78:94:c2:b5:2b:
58:16:d3:61:c4:66:9f:9a:66:cd:2f:58:db:42:38:
83:6b:94:d4:aa:a6:02:d5:e7:16:79:15:da:2b:7a:
2c:40:cd:fa:27:f4:7b:d9:98:60:29:f0:c9:f4:ba:
6a:5c:36:ac:89:5a:5b:2d:69:87:80:21:6d:1f:79:
ac:ee:44:65:42:38:9f:09:9a:71:c8:34:00:a2:ce:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:5F:32:71:0B:8F:8C:DA:9D:44:F3:78:6F:72:48:EA:98:2E:0D
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:61:83:13:e1:dd:57:c6:c6:0e:28:86:60:75:22:f9:03:
78:d5:c4:8c:22:de:bd:4e:b2:28:3f:e9:d7:ef:d9:94:7f:62:
98:b5:d3:d6:bc:71:5c:9c:99:38:d8:da:aa:5d:36:97:e2:88:
26:73:8b:d8:2a:a1:04:86:34:da:6b:1e:0f:22:bd:9a:b2:0c:
33:75:fd:29:de:b4:c8:b6:f6:3a:dd:42:ad:e3:30:84:6a:57:
0f:a9:96:59:c6:6b:61:65:19:a9:34:66:bf:8b:63:6a:59:13:
19:b4:2d:39:28:a1:45:81:9e:25:68:74:6e:1f:59:f3:04:af:
39:61:ac:61:ed:65:f4:99:e0:8e:8a:9d:85:26:3f:dd:43:44:
eb:ef:be:64:b2:6d:55:0f:ae:2f:7b:b1:73:1a:e5:2b:46:15:
42:39:3f:32:6b:56:92:b5:a9:96:9a:50:fc:21:8d:5c:91:75:
e7:eb:f5:db:31:60:d7:4a:07:d8:3c:c3:f2:79:9d:70:6b:7b:
b4:41:1f:c5:45:7c:bd:67:d9:f3:fb:aa:4d:55:38:61:08:71:
cc:df:42:74:a6:e4:54:92:e4:04:00:90:08:05:4c:c9:cf:d8:
84:45:f0:78:09:23:1c:23:13:ba:5c:99:25:b5:96:b1:1b:bd:
8b:1f:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:29 2025 by rpki-client