Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: bAF/rVJWzQaITnPV+ilkaYHGlznNK4+5O5dzDeCRaKc=
Subject key identifier: 2C:82:C7:55:7D:93:65:B3:F6:19:8C:F9:E2:FF:B1:75:EE:29:92:4E
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0197808D8EEB7E322F6557EEFD08D4CFE758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0CCF
Signing time: Wed 18 Jun 2025 01:00:50 +0000
Manifest this update: Wed 18 Jun 2025 01:00:50 +0000
Manifest next update: Thu 19 Jun 2025 01:00:50 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: T+PoXEG4+ubMtRR5gMSDjLPlpyiiSEJXmUztzB7PmnE=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:8e:eb:7e:32:2f:65:57:ee:fd:08:d4:cf:e7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jun 18 01:00:50 2025 GMT
Not After : Jun 19 01:00:50 2025 GMT
Subject: CN=2c82c7557d9365b3f6198cf9e2ffb175ee29924e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:7f:a8:e7:1b:c4:a4:21:f0:5d:d2:48:6c:
96:46:07:28:9d:83:1e:a0:8e:eb:4e:be:7b:19:98:
50:ab:38:be:5a:d8:18:8f:98:b7:c4:51:dc:90:ee:
0c:48:8d:0d:41:59:d3:c9:bf:6f:a0:2d:5b:8b:8c:
e5:f6:b0:f3:77:58:a9:d8:4d:a9:5d:7c:53:2c:8b:
56:f5:11:47:46:db:bb:66:df:e9:4c:0e:81:08:3a:
00:48:b0:ee:71:e7:84:04:5c:76:8e:2f:90:5c:84:
72:8f:34:aa:3b:d7:25:a4:5b:70:15:1c:6a:8e:aa:
74:0f:35:f7:e9:d3:06:41:e5:85:37:62:53:9d:e6:
71:fc:27:38:ca:df:e8:e1:3b:38:cd:bb:9c:8a:5b:
25:2b:eb:12:09:d1:9b:7b:a7:42:ec:f9:c0:6f:72:
62:94:97:1e:98:e4:fe:41:63:44:d1:cd:4f:e4:c8:
28:15:09:c6:e8:99:59:cc:45:58:8a:d4:d5:87:6f:
25:d4:25:13:ed:b8:ab:9e:09:b4:9d:ea:9c:aa:2a:
dd:3e:84:ea:51:97:66:74:4e:87:63:a7:a9:6b:13:
d6:ca:fc:b2:4a:4c:e2:88:ff:46:5e:b5:24:8d:cc:
24:51:a4:a5:85:16:57:18:38:2c:2d:24:4e:04:45:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:82:C7:55:7D:93:65:B3:F6:19:8C:F9:E2:FF:B1:75:EE:29:92:4E
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c3:cc:b0:8c:37:ec:5d:65:39:bf:ca:f2:d7:f8:79:d7:f0:
aa:bb:49:78:a4:3e:bc:24:f8:c3:6f:9b:7c:d0:58:0a:64:2f:
a9:0f:9a:b3:2f:7c:82:0c:f9:81:c9:0c:c0:e8:6e:51:3f:aa:
46:e3:e4:bf:6b:e2:97:32:6a:7f:05:38:7f:fe:1e:a7:d4:81:
30:44:ea:9d:61:d3:5a:9f:6e:6e:2f:79:e4:4d:42:94:54:22:
b5:7d:7c:ab:36:cf:6a:64:fe:64:16:6d:2e:72:e2:b2:2a:62:
3f:03:e1:a1:85:2e:24:02:a1:dd:6a:66:1b:26:7f:58:19:1e:
1f:cd:c6:a6:b7:4d:c1:34:8f:fb:8a:15:20:fc:66:40:ac:6a:
62:b1:d3:11:8e:e7:52:d0:0f:cb:94:ca:0c:dc:6b:cf:b4:bf:
75:bd:3c:3b:5d:7c:ee:29:58:38:95:6e:3a:b0:19:cf:53:50:
f8:af:ca:aa:4f:b2:33:09:f9:28:b4:8c:9d:3f:24:34:d6:e5:
4a:11:6e:4b:fe:f4:cf:e9:9e:eb:10:ea:de:ef:6f:3a:e0:4a:
9f:08:ec:d9:a8:e4:b4:79:c7:f6:ef:07:41:c0:09:a3:d6:c9:
68:40:c6:f4:b0:ac:aa:ec:30:02:8a:e4:18:ef:45:5f:72:42:
6a:ee:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:52:44 2025 by rpki-client