Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: KifhV17t35q9ZFKUEKo+0s0P0P6mkiJqJgdjlmCgl6I=
Subject key identifier: F5:5A:E7:AC:FA:FF:48:EE:3E:D2:AA:CD:67:86:65:01:A5:02:48:76
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 01974742A7E606D83BB7A16A79D0E25A9EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0BA4
Signing time: Fri 06 Jun 2025 22:00:39 +0000
Manifest this update: Fri 06 Jun 2025 22:00:39 +0000
Manifest next update: Sat 07 Jun 2025 22:00:39 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: 9n+UbqJJyy/nsge+CVFUXfTqvOBO4evHQIfdEUlwcZI=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:a7:e6:06:d8:3b:b7:a1:6a:79:d0:e2:5a:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jun 6 22:00:39 2025 GMT
Not After : Jun 7 22:00:39 2025 GMT
Subject: CN=f55ae7acfaff48ee3ed2aacd67866501a5024876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:93:bb:9c:97:ab:03:56:17:91:14:b8:57:
5c:8a:b9:d9:cf:1d:5f:47:21:9a:b7:7a:59:0d:68:
36:50:90:40:29:9f:ca:7b:94:4c:7b:09:e0:84:c5:
da:6c:ac:92:de:cb:7b:4f:85:8e:20:a6:cf:54:3b:
61:8b:41:8f:14:d9:3b:9f:49:c3:d7:6e:58:65:f7:
cf:61:bd:14:3f:d6:6f:21:1e:97:a8:2d:cf:63:46:
d5:c3:0f:33:ee:f1:bb:cc:fd:a7:5c:70:56:79:07:
cc:b2:dd:71:7a:b5:38:c0:1f:d9:bc:d8:d1:93:fb:
c2:06:8d:5e:6f:3e:f1:ca:46:04:d6:b7:f5:af:d4:
cc:2b:b6:bf:5b:ea:7e:77:a2:e7:05:a7:34:c6:dc:
dc:78:a3:21:8e:56:2b:24:15:1b:02:93:7c:c0:5c:
7a:b1:b3:ab:10:a3:3c:45:01:4a:f0:42:2b:8e:5b:
44:dc:ab:77:2d:96:c4:3a:87:fb:00:98:44:b6:0c:
1d:3f:34:2f:75:65:bb:59:b2:ac:a0:2d:57:b8:47:
f0:c3:8c:85:be:ea:56:18:78:62:bd:40:46:3d:5b:
61:1b:3a:f2:9e:05:6c:6a:2d:10:e7:37:de:c0:14:
06:ae:d9:89:31:30:7f:a5:88:ca:4f:d1:70:07:f6:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5A:E7:AC:FA:FF:48:EE:3E:D2:AA:CD:67:86:65:01:A5:02:48:76
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ec:35:ab:94:b5:d6:04:f6:94:35:0d:66:f4:e1:fa:72:b4:
8c:00:41:e8:de:63:2a:e8:64:a1:37:31:29:a6:6f:3f:96:2d:
af:c2:4e:5f:a5:26:f5:45:c4:7e:34:64:d2:40:a6:21:06:e4:
a2:e5:53:f6:dc:52:29:68:6c:0d:0d:6b:ed:f1:92:b4:55:d3:
8a:84:1b:a0:6c:bb:db:96:83:80:d0:32:a7:70:7b:8f:86:30:
bb:16:d3:ed:ac:42:8e:e6:0c:9f:ae:0a:4f:8f:0b:20:b5:ad:
4b:b2:73:4e:f2:8f:8c:ca:cd:a4:24:35:bb:4c:3f:45:db:dd:
84:77:03:10:1e:0a:b1:95:31:e8:4b:18:99:04:b3:7c:e5:40:
2d:b1:1a:d9:c3:c0:ab:c6:21:31:53:04:76:78:ef:48:b4:ec:
79:01:92:bf:51:23:91:a3:f7:b8:45:e4:1c:c2:e5:dc:2f:e1:
06:66:e3:77:37:d5:b4:70:c9:04:6a:f9:9d:a9:27:09:96:e7:
e6:87:0a:08:f1:aa:45:cd:a1:e2:1c:c8:50:31:10:08:30:01:
bf:7e:f4:64:91:7a:c3:92:41:fe:ac:b9:04:1a:8b:bc:31:85:
98:82:ef:5a:83:38:99:0f:4f:b7:12:50:64:f7:87:af:e8:c8:
5d:85:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:28 2025 by rpki-client