Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: bBs9iZdM2inJrZw9wvWPmc7h/2oDDaoY0mut55FVP+Q=
Subject key identifier: C8:27:55:9B:7D:9D:A3:72:33:DF:CF:8F:71:FD:87:A7:57:0A:C3:06
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019770077403F9A47331A465EA39319CBB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: C9
Signing time: Sat 14 Jun 2025 20:00:25 +0000
Manifest this update: Sat 14 Jun 2025 20:00:25 +0000
Manifest next update: Sun 15 Jun 2025 20:00:25 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: AJjxz6fLyzg0ipdLTT2YUAfBDIZH6mrD6QNcEiK29uQ=)
2: ghemx7_KeR2Mo7Zd7b3Yw7Rm5m0.roa (hash: dfuZiKRSGnfBsJSrGQVK/jOI9vvcNJZDWJg5sUNCJuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:74:03:f9:a4:73:31:a4:65:ea:39:31:9c:bb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Jun 14 20:00:25 2025 GMT
Not After : Jun 15 20:00:25 2025 GMT
Subject: CN=c827559b7d9da37233dfcf8f71fd87a7570ac306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:e3:d1:92:dc:e1:00:99:f6:96:6d:d4:01:
43:2b:b5:8d:17:f2:c7:a0:94:64:76:8c:34:e8:5a:
c7:c0:64:60:3c:e7:78:36:52:3a:c0:7b:60:ab:46:
b6:84:cb:33:66:6f:7f:89:a9:64:04:11:cd:e8:1f:
32:9f:fd:d7:2d:8c:ae:6b:50:61:3e:c2:28:e0:6e:
b4:11:48:09:ac:d2:ef:fa:5e:39:2c:a8:ca:0c:c9:
20:b0:de:e2:80:ec:6c:6e:9c:bb:b7:57:d3:dc:1b:
a0:cf:e3:ae:e4:d5:dc:95:fb:b2:e9:cf:f6:56:be:
20:2e:2d:2c:2b:1e:38:6a:6b:fb:02:46:a1:04:c3:
a9:bc:c5:87:4b:9a:40:23:55:68:05:c4:15:47:b0:
1c:e5:dc:0f:d8:e8:5f:65:ac:14:4d:9c:a3:68:9b:
24:df:d8:75:03:43:d4:21:e9:03:95:1d:fc:40:1f:
45:fa:31:f2:cf:d1:76:eb:71:cc:c7:f1:d1:2b:b0:
11:1e:d9:16:90:42:ad:78:f8:53:f0:2a:b1:b7:4c:
53:c3:cf:81:21:b0:fe:ee:9b:20:73:90:41:dc:61:
b0:bd:3f:9f:26:84:b6:91:3e:fe:24:5e:5d:5b:8d:
25:82:fe:a8:a1:42:80:a6:b5:2d:6a:0d:78:3a:ad:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:27:55:9B:7D:9D:A3:72:33:DF:CF:8F:71:FD:87:A7:57:0A:C3:06
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:7b:dc:d0:7a:d1:d8:c9:98:3b:2c:a6:48:84:f6:1c:a9:
7d:16:e7:77:f6:a4:db:d8:31:3f:df:40:93:c0:c1:f0:b2:1d:
ff:c5:63:b0:0a:ac:0b:66:e8:a7:b9:dc:38:2e:ff:e3:67:18:
ed:67:b4:c8:5f:9f:68:f1:a6:3e:ff:a6:54:e0:70:cb:57:9c:
d0:e8:b6:4c:47:78:c6:86:7c:76:d3:39:71:37:95:1c:8c:5c:
c7:f1:17:d4:a1:e6:32:23:1e:d7:f5:c5:76:26:5e:37:89:41:
06:da:10:66:45:2b:60:19:0c:c0:a1:5f:06:28:c0:8c:58:75:
96:16:22:87:86:e0:ec:b1:df:d1:bf:51:5f:32:2a:51:49:06:
05:68:2a:64:21:09:f6:cb:52:62:d6:87:e6:b1:bc:f4:f1:ac:
5e:9c:92:2c:d2:b4:09:59:9a:6e:a0:c4:99:a5:41:ed:7d:24:
4e:9d:7a:51:2c:8b:84:3e:a1:5b:06:0c:4c:6a:1c:13:6c:c2:
18:db:a3:87:9b:8d:af:e4:20:e4:c9:b0:d0:e2:c3:59:2d:9a:
d4:a6:be:07:70:79:8e:d8:08:63:42:21:0f:62:18:63:9b:d3:
38:a4:73:f8:b0:4b:63:1c:27:cd:c0:2e:25:42:27:1d:a3:26:
3a:56:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:39 2025 by rpki-client