Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: 2YdluGgeG2hADOr6LLG2UsXTkbSkIrzXQ50jM0VGVI0=
Subject key identifier: DD:55:75:09:FC:9F:C5:12:E6:A5:9F:5F:05:D6:97:48:45:0F:20:9A
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 01976BBD21A89277BD3D3B5F118782867BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0E0F
Signing time: Sat 14 Jun 2025 00:00:46 +0000
Manifest this update: Sat 14 Jun 2025 00:00:46 +0000
Manifest next update: Sun 15 Jun 2025 00:00:46 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: TKjz0GmaSUiZVI1xehU7ZwSIxNs1k4V9AbUF2GtMxrk=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:21:a8:92:77:bd:3d:3b:5f:11:87:82:86:7b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Jun 14 00:00:46 2025 GMT
Not After : Jun 15 00:00:46 2025 GMT
Subject: CN=dd557509fc9fc512e6a59f5f05d69748450f209a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:e2:aa:2c:80:d1:67:5e:b3:03:5d:09:23:
1b:c6:c4:4a:f4:99:9c:0c:1d:87:46:e7:42:c6:2b:
70:ea:e4:9e:06:be:8f:30:ac:0e:0a:2f:2e:50:19:
03:d6:c5:b0:b1:e0:03:ed:23:dd:1e:a8:6a:eb:f2:
f6:1c:ee:d0:ed:7c:1e:34:ab:27:10:ef:54:e2:12:
fb:85:af:ec:9f:bd:3a:2b:fe:93:9d:56:10:d6:b1:
dd:7e:ac:c0:6e:a8:d6:bc:68:b9:fd:1b:b5:50:c6:
c0:72:a6:86:2a:d0:6a:fd:b6:f7:30:3f:13:f1:f4:
88:31:2a:96:46:50:1e:f2:8e:80:5c:e3:cc:06:82:
4c:ed:4d:be:30:d6:99:1c:42:22:0d:44:35:bf:01:
02:84:8b:cb:ea:0d:9e:bc:f0:aa:a9:c3:08:ab:9f:
7c:98:2c:6b:48:de:ee:2c:49:58:b1:50:13:0e:09:
e9:ae:e4:28:20:20:49:3b:79:d8:69:c7:4b:51:87:
5f:94:fc:7b:52:5e:d2:82:cb:b1:86:9b:2b:4c:39:
d8:fb:d7:79:98:5e:2e:2b:17:cf:78:a5:4d:28:94:
e2:a1:82:80:c3:81:ce:e7:c4:eb:01:ea:e3:c6:6b:
b5:24:a1:80:ef:39:0c:d5:bb:35:b1:9c:51:6f:82:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:55:75:09:FC:9F:C5:12:E6:A5:9F:5F:05:D6:97:48:45:0F:20:9A
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3b:b7:7b:64:84:fc:27:80:48:c9:43:f7:1d:33:7f:af:35:
63:b4:5c:ea:8e:4d:8f:e4:a1:91:93:5b:42:ed:e6:1b:6f:fc:
40:00:a1:76:b9:f0:81:72:ee:51:20:d5:42:49:9c:fd:77:e7:
8d:c7:ad:bc:ba:5e:d8:e6:fa:17:b7:8b:3d:6f:fc:96:12:6e:
b0:00:5f:52:aa:ec:eb:e6:e6:b6:c8:70:01:cf:13:52:ab:cb:
d0:65:31:c8:f7:8b:53:bb:f1:a0:34:79:7c:3e:f2:ea:41:df:
59:20:dd:e6:10:54:d6:8b:ae:ca:45:e1:ec:9d:78:4a:37:7d:
f9:30:cc:98:48:0c:5f:8e:34:d3:94:49:75:f8:10:b2:58:18:
c8:fa:34:eb:f8:94:95:4e:02:1c:25:eb:84:7c:ed:3c:38:08:
cd:cc:38:c0:6c:ac:d5:d4:8a:45:4e:d4:82:1f:16:bb:7e:4f:
f1:7e:00:57:9c:c8:53:30:9d:0d:ea:41:6e:95:6b:af:d0:48:
bf:12:27:25:e5:ef:ba:4b:00:6e:21:8c:db:01:58:f2:28:7c:
92:26:e4:fc:e2:c0:6b:d0:d2:49:6f:02:b3:b1:fb:f4:98:b4:
db:4c:2e:db:4b:9f:59:18:0d:7f:2a:18:68:10:a1:71:fe:fc:
17:cf:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:53 2025 by rpki-client