Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: o/eTuKnn+m2EIPTOwV29xOWHjK2zOMAwPBCdJH16hX4=
Subject key identifier: 88:79:D4:E5:9F:E2:A9:2D:B5:46:39:C5:E4:2E:2F:E7:FB:BA:CA:88
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01974667030FD7E4153A1E1EA88AD9E17B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 07BD
Signing time: Fri 06 Jun 2025 18:00:45 +0000
Manifest this update: Fri 06 Jun 2025 18:00:45 +0000
Manifest next update: Sat 07 Jun 2025 18:00:45 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: Fzb6Rl4v5DUEuTXe6QbULjooU1oOdsIQ6mOpI7s6r6k=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:03:0f:d7:e4:15:3a:1e:1e:a8:8a:d9:e1:7b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jun 6 18:00:45 2025 GMT
Not After : Jun 7 18:00:45 2025 GMT
Subject: CN=8879d4e59fe2a92db54639c5e42e2fe7fbbaca88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:0b:1b:81:e2:07:58:4b:e9:16:d9:9f:9f:
81:4a:89:52:8f:99:87:f7:05:b6:24:18:1e:28:77:
44:62:9f:92:6d:5c:57:3c:1a:58:f6:bf:31:0d:3b:
33:39:d8:bf:c3:ec:44:ff:e2:ed:aa:8b:e7:28:7c:
17:92:e0:2c:c7:23:49:75:ef:e0:cb:cd:dd:bb:ff:
80:b3:61:90:b8:d1:8c:4a:ab:1d:0f:8c:cd:8e:6f:
2e:01:2b:fa:55:51:ff:31:e5:06:aa:b4:2d:47:ce:
7a:c0:83:96:48:b9:8c:d9:ac:1b:f6:24:84:50:46:
41:56:86:b4:ef:b0:72:74:bd:69:56:ae:a3:60:6c:
f8:73:4b:34:cb:c2:29:74:72:4d:16:c1:b9:04:fa:
4e:f6:5c:d7:fb:f3:61:d2:97:65:f1:6d:da:41:a6:
63:84:8c:b6:f1:a3:6e:56:01:c6:9b:af:3b:7c:4e:
90:8d:99:39:9a:56:8a:40:b2:7e:3d:cf:be:79:1b:
cc:e1:5c:32:65:76:3c:62:94:e0:29:f7:16:bc:0b:
46:ff:97:76:e5:bb:56:2b:e0:ca:ed:c8:75:1c:fb:
3e:7f:94:e0:18:18:d7:09:29:5f:e6:b4:a7:24:f3:
37:05:10:55:e9:68:8d:5a:67:0c:5c:ca:fa:12:fe:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:D4:E5:9F:E2:A9:2D:B5:46:39:C5:E4:2E:2F:E7:FB:BA:CA:88
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:72:da:de:13:67:64:cb:5f:f9:b2:3b:9b:ce:e8:87:49:ef:
32:03:86:fc:96:a4:17:68:4d:34:64:0c:df:75:d1:0c:c2:8f:
6e:4e:8e:86:34:43:58:a5:e4:3b:74:7e:06:ff:89:71:ab:c0:
e9:92:a8:1d:c6:86:6e:98:78:89:f6:de:3b:a3:e3:ed:48:d6:
ed:d1:a8:36:9a:a4:4b:02:96:fa:dc:e8:7c:dc:02:2d:47:86:
81:4c:e3:d3:b6:03:d2:6a:f9:cd:47:eb:ce:85:e0:af:74:8d:
0d:f2:04:22:13:fb:da:a1:21:bf:1b:04:7b:db:d9:82:d6:4c:
5f:83:81:9f:1e:dc:37:23:24:20:f6:1c:f3:ff:2b:0f:bf:07:
d2:d9:5e:ec:07:8f:d3:f2:56:74:7e:b0:fe:15:3b:90:84:94:
09:49:62:f0:bd:9b:50:fd:11:cf:c2:d4:58:60:e8:2b:c7:e4:
6b:b5:ce:26:8a:c4:0b:1d:4f:30:82:f8:75:e5:a7:9b:eb:df:
90:e4:20:45:6f:60:5d:e6:58:21:c4:87:ca:b0:16:ad:15:07:
43:69:19:92:72:3a:d2:11:84:e7:76:86:39:c6:0f:14:3d:4b:
a0:70:1c:9e:9c:ec:6f:90:65:78:59:8e:36:d6:ed:26:3d:46:
7d:c2:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:22 2025 by rpki-client