Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: F3K9jrCK74QxJNwmMRuXFxemFm9uI2Jo8V+LpObFJfY=
Subject key identifier: 4F:FE:AB:3A:F3:74:CE:83:25:2C:A1:18:3E:8E:28:7C:3B:8D:CA:F2
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0197684DD68A5F927CF0F9C577D57C261A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0ECF
Signing time: Fri 13 Jun 2025 08:00:20 +0000
Manifest this update: Fri 13 Jun 2025 08:00:20 +0000
Manifest next update: Sat 14 Jun 2025 08:00:20 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: JXoYJN+agtFQJFJRIl70WSvMsqd3vVzTgTAzZsJ1Cq4=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:d6:8a:5f:92:7c:f0:f9:c5:77:d5:7c:26:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jun 13 08:00:20 2025 GMT
Not After : Jun 14 08:00:20 2025 GMT
Subject: CN=4ffeab3af374ce83252ca1183e8e287c3b8dcaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:9b:fa:bd:fb:c3:85:64:10:21:f3:57:72:
08:78:27:36:1b:d4:ab:79:23:37:2d:d5:3c:ca:25:
ca:69:b5:17:36:15:32:d0:bb:31:d7:f7:08:80:14:
99:71:a8:e6:10:69:85:77:04:5d:94:0d:de:7a:1e:
1e:bd:6e:fb:9f:e8:be:e0:ae:ef:f8:0b:f0:70:55:
9e:32:29:e4:79:43:cb:f3:10:63:31:9d:9c:c8:57:
14:b5:f3:d6:8b:c4:6e:5c:b8:a5:08:7d:92:ef:4c:
7a:5c:c6:2c:34:36:0b:b9:91:b8:74:98:e9:be:f9:
bc:46:d9:a5:f6:3e:11:73:75:48:83:11:81:71:2e:
b6:e9:f1:1f:5d:9e:23:3e:bb:7d:1e:17:52:d7:e5:
e6:d8:e5:cc:f5:60:63:c8:f5:9b:93:c1:70:8a:23:
73:ee:0d:5a:63:46:da:2b:21:99:b5:71:07:71:1c:
4d:88:b4:e9:3b:7c:06:df:3d:60:7f:8e:94:c5:69:
b1:99:1f:7c:33:08:f6:45:42:0d:b4:0a:cd:39:3d:
c3:ab:11:3b:fa:3c:37:46:97:6c:66:e6:3c:15:28:
cc:fd:42:06:e0:11:e9:64:d7:8b:d0:c8:91:12:17:
66:ed:2d:7b:79:65:24:a3:d2:94:be:03:ec:30:f6:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:AB:3A:F3:74:CE:83:25:2C:A1:18:3E:8E:28:7C:3B:8D:CA:F2
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:70:1d:06:f3:ab:70:db:40:af:fe:8f:bf:90:30:37:c7:2b:
fe:bf:2d:cf:21:09:15:8c:50:0d:b4:bb:0a:4f:6f:3d:78:3d:
82:9c:96:a5:ab:cd:5c:55:b2:24:29:cb:04:94:bf:b8:38:7f:
86:47:d5:35:83:83:fb:8f:70:26:32:c8:5e:e0:df:21:c0:94:
bd:8e:a2:bf:c5:0f:8d:58:4c:f5:83:29:73:92:2b:c6:09:79:
bc:15:fc:b3:5f:40:ef:38:94:89:a1:b8:21:52:d1:9f:17:40:
4f:4f:64:83:84:62:95:49:ce:6a:36:4e:ff:7e:ce:00:cf:24:
ec:0a:93:f6:11:56:11:e6:ad:b6:e7:55:17:f8:6f:70:c3:85:
15:5c:37:af:ff:de:50:d1:05:91:4b:11:bc:7d:d1:c8:56:2d:
24:7c:56:1f:68:04:da:aa:39:82:90:26:7e:54:fe:6c:05:0d:
f7:59:b8:62:b6:75:3c:9e:0b:74:ff:b0:2c:53:55:e5:1c:c0:
05:f6:2b:e8:09:76:11:4f:d1:e8:5c:66:94:eb:e3:6d:60:81:
2d:33:04:3c:bc:3f:87:9b:b9:5c:ea:2f:2b:30:2e:66:87:1e:
78:a6:72:48:df:09:e8:74:97:ab:13:c6:c9:12:6f:31:84:03:
00:b3:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:59 2025 by rpki-client