Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: 5BeWtEd6bDP3f/pGfNmhOlC2lgisBCDs38Vipsf2xak=
Subject key identifier: BD:1A:1A:D3:B5:35:18:41:1E:6F:E8:1E:5D:34:5C:2A:C0:C9:81:D0
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 01976F62BA117A372EB684E88C350D6D789E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 17:00:30 +0000
Manifest this update: Sat 14 Jun 2025 17:00:30 +0000
Manifest next update: Sun 15 Jun 2025 17:00:30 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: QpH9uUUKECtX1LCutv9eHYZmButvWbJtFTBeE6//hhA=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ba:11:7a:37:2e:b6:84:e8:8c:35:0d:6d:78:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jun 14 17:00:30 2025 GMT
Not After : Jun 15 17:00:30 2025 GMT
Subject: CN=bd1a1ad3b53518411e6fe81e5d345c2ac0c981d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:60:50:f2:68:51:c4:01:ee:77:93:74:98:
4b:89:6b:fc:46:a8:77:17:68:ae:78:97:a5:a7:24:
13:72:14:94:b3:df:1e:24:ce:0f:4b:f1:a3:1d:6c:
46:66:e3:61:31:91:60:18:b8:4b:63:88:a3:a4:76:
26:f2:e1:bb:bf:47:c1:fa:7e:07:56:3d:10:60:1c:
72:2d:1d:45:4a:cc:f9:6e:05:4a:10:5f:42:2e:8e:
59:62:a2:26:e1:96:80:ef:ed:e9:b0:f4:77:7d:e0:
6b:e3:7c:a9:30:09:bd:94:90:ad:f2:2b:d3:5f:f3:
6b:ea:30:73:8e:08:08:9f:2b:91:71:14:01:bc:7f:
38:42:ff:7b:a9:19:68:05:a0:0e:6e:28:06:05:c6:
d5:07:58:f4:fc:96:06:45:3c:35:f1:6e:1f:12:62:
32:29:0a:12:8c:df:4f:35:df:b0:d3:f2:39:01:64:
36:e2:92:13:e1:c8:76:d2:2a:6f:3c:25:68:83:f6:
6e:bd:ee:40:af:c3:80:28:1c:25:89:4f:ae:19:54:
7c:43:47:72:b6:32:59:e9:8d:bd:8e:97:ff:90:bc:
4f:63:dd:f6:72:60:15:25:bf:fc:3a:1f:bb:0b:ac:
49:a8:95:f3:9c:af:3a:3a:44:ab:89:c4:4b:6a:38:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:1A:D3:B5:35:18:41:1E:6F:E8:1E:5D:34:5C:2A:C0:C9:81:D0
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:48:f8:91:fc:a6:4b:89:b9:0f:4c:0a:a9:58:e9:b0:62:63:
4f:09:0a:a6:6b:69:49:70:da:4f:e8:f6:1c:1e:56:47:a3:eb:
b6:52:ad:2d:bf:da:b9:13:49:14:a0:2c:38:c0:d7:24:1b:fc:
25:a2:15:63:4c:2c:b7:43:74:91:8e:92:95:79:70:4f:3d:88:
53:fa:20:8b:8c:22:83:df:86:4f:49:ee:98:04:13:f2:fe:a0:
0d:25:26:c4:51:b2:1b:d2:c6:bf:08:5d:79:f2:d0:66:de:1f:
67:3e:76:10:48:d6:dc:ad:d5:02:e7:d2:f3:1d:b9:23:13:fa:
cc:16:23:d4:59:e3:0b:25:6e:48:a5:0a:8b:96:9d:89:39:2e:
e1:b1:88:7e:d5:92:7d:95:26:8e:c5:60:e2:a2:6a:90:50:fb:
51:84:2b:59:e1:aa:80:88:a2:26:b0:e6:fe:84:fd:3b:3f:28:
75:bb:b6:85:36:98:28:92:1f:11:a5:37:8f:4c:11:1b:45:7c:
65:3a:da:57:2e:e3:0d:83:5e:53:65:54:76:0e:9c:80:7a:c6:
ac:5e:b9:e6:38:c8:c5:fd:7a:cb:8f:97:9c:99:20:c1:f7:96:
84:d8:fc:6e:52:64:ce:f9:ff:d0:95:e7:cd:6d:ff:69:d3:e1:
d6:88:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:33:17 2025 by rpki-client