Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: JHmPmxW5+rJSbscPoj0soBbKkGnJrHoPjpNwFHjmcb8=
Subject key identifier: 78:E2:22:0A:48:A4:C2:2F:AF:AA:DA:8F:36:34:86:5A:A3:82:DD:07
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019768851353FE3C37C07FB6548F624FAF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 10CD
Signing time: Fri 13 Jun 2025 09:00:40 +0000
Manifest this update: Fri 13 Jun 2025 09:00:40 +0000
Manifest next update: Sat 14 Jun 2025 09:00:40 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: D2l+kvMiV7AbTpAkp/bpzZGIZmhYk4C3MM8nWTKhJuk=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:13:53:fe:3c:37:c0:7f:b6:54:8f:62:4f:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jun 13 09:00:40 2025 GMT
Not After : Jun 14 09:00:40 2025 GMT
Subject: CN=78e2220a48a4c22fafaada8f3634865aa382dd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:ba:06:ef:92:d0:a9:e2:07:13:42:f6:16:
91:00:7a:d2:85:34:8d:04:14:0f:5a:dd:d1:c8:90:
37:32:7f:b4:4c:e0:09:be:ef:10:fc:62:da:46:ac:
4d:11:75:14:e1:b7:25:d5:63:79:65:55:32:c2:18:
62:70:5a:76:00:29:d0:0d:06:62:32:71:a5:63:87:
9a:2d:6c:a7:16:04:9e:98:ab:78:a5:d3:ea:f9:72:
69:08:39:74:3e:d9:3e:9a:8c:e4:23:70:c8:b8:ee:
a0:71:49:be:82:41:5a:fd:1a:90:cb:8f:9c:09:97:
f9:3c:3f:08:97:fa:49:af:e2:8b:41:29:dc:01:33:
e5:4b:ab:4f:1b:41:78:86:d5:75:b7:d4:37:88:d9:
a4:77:2f:41:57:61:ac:09:48:b9:a0:81:33:30:f6:
c3:4b:ed:ac:d4:59:22:53:f3:fe:36:46:e5:91:e2:
69:c3:ba:ba:3d:88:0c:d2:b0:9f:12:6d:15:3b:da:
44:c4:9a:fe:74:dd:44:30:d7:7c:2d:13:3e:25:a4:
f1:f7:8b:b6:4a:c0:6f:4e:3c:26:89:42:90:53:78:
81:d2:cb:4f:25:03:42:8f:a8:11:99:2a:92:74:66:
48:25:5f:25:6e:73:3d:c1:50:d8:de:11:c4:0a:35:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:22:0A:48:A4:C2:2F:AF:AA:DA:8F:36:34:86:5A:A3:82:DD:07
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2e:07:b6:7a:5e:fa:6c:8c:21:0b:ce:c0:ea:53:3e:e1:b7:
39:ef:85:e0:53:18:a6:99:b4:9c:b6:6a:6b:38:13:e2:97:a1:
6c:e2:dc:73:0c:8c:cf:89:74:95:b2:44:41:b3:dd:d6:48:cf:
46:f1:96:e7:94:cf:e8:66:d5:35:7b:76:8e:af:8c:29:8a:c3:
2f:1f:67:6c:d8:b4:8d:57:9b:b5:c4:af:56:3d:8d:38:b9:e2:
60:6e:41:fe:07:a4:31:0b:35:9b:7d:c3:78:0d:91:e9:61:03:
f5:19:68:d8:d3:94:62:e9:de:d9:bd:4e:29:e5:70:2b:f2:4e:
97:72:4a:3e:36:dd:3e:5d:91:fc:4c:44:f2:1a:36:cd:6c:28:
d3:29:04:36:de:17:7d:c7:29:3a:35:53:91:4f:9e:09:a8:e9:
03:b9:db:92:ff:07:41:53:a9:00:31:d8:e1:e5:80:0f:d5:d7:
4d:1b:09:d8:89:08:1f:04:72:09:de:aa:96:e3:af:99:3a:03:
bb:99:a6:03:39:16:b1:82:61:f5:69:c7:0d:b0:c7:56:f3:a7:
49:0f:72:2e:86:85:5b:8c:0c:79:04:f6:be:9b:92:e6:d6:97:
4a:fa:6b:14:a3:57:73:fb:9a:63:67:ec:3c:11:74:01:fd:cf:
df:a3:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:17 2025 by rpki-client