Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: GJIxGnt+Mx9En0riNw0NTTFTLJuONAypOXE0scx1UT0=
Subject key identifier: EE:00:71:77:48:FC:0D:2B:EA:C8:44:5C:FD:B8:00:02:36:67:18:36
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 01974779E42FA598AE422C22AFB27C5DAB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 0524
Signing time: Fri 06 Jun 2025 23:00:59 +0000
Manifest this update: Fri 06 Jun 2025 23:00:59 +0000
Manifest next update: Sat 07 Jun 2025 23:00:59 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: 1d1D+WNQgdIEOmMWW8nX6qzdLI83iyXXBxcgHxlBZw0=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e4:2f:a5:98:ae:42:2c:22:af:b2:7c:5d:ab:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Jun 6 23:00:59 2025 GMT
Not After : Jun 7 23:00:59 2025 GMT
Subject: CN=ee00717748fc0d2beac8445cfdb8000236671836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:10:69:98:f5:50:f6:63:b8:6c:e9:5c:94:
ef:36:c4:45:7e:d4:f2:e8:1f:f1:96:7a:f5:2c:33:
24:87:59:d5:0e:f7:21:af:ba:87:a2:48:f1:9c:9f:
aa:4e:68:ac:8b:1f:25:25:d7:83:f4:2c:2c:f7:9e:
49:a9:bb:f4:4c:c3:c6:a5:37:17:d1:50:f4:7a:7c:
3b:a1:2e:c3:b4:21:40:6e:37:c6:69:f4:92:d5:8c:
3a:7c:14:86:96:82:5a:4d:6b:9e:6e:7d:a6:6b:ae:
f3:a0:f0:1c:89:a2:a8:2e:a0:98:bc:9e:70:c7:45:
04:8f:5d:19:8b:d2:7c:f6:eb:1b:3d:65:3b:d1:81:
68:7f:7d:30:9a:64:53:f3:39:62:f4:f8:52:e6:43:
7b:23:4e:48:d9:9e:75:2b:30:b7:02:9b:10:e0:94:
28:9f:06:b7:c3:e7:0c:9c:a9:c9:17:b1:a5:7d:e6:
c1:82:77:72:0d:3d:ab:8f:7c:c6:c5:bd:24:fb:ee:
ce:6e:ba:c8:e3:a8:43:6b:46:54:12:40:2b:bc:8d:
b4:9f:34:8c:dc:64:5c:84:69:02:46:3d:b2:af:62:
8f:de:50:4e:4b:49:8a:6e:b9:31:af:b3:1d:d7:f0:
9b:09:02:1c:dc:0f:ae:29:0b:b3:ea:36:55:8e:e1:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:71:77:48:FC:0D:2B:EA:C8:44:5C:FD:B8:00:02:36:67:18:36
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:12:ed:0b:70:38:69:98:58:f1:5d:c6:b0:53:37:77:a8:38:
e6:fd:4a:fb:c3:12:aa:c3:ad:bf:c7:79:82:38:0b:c6:e0:06:
e7:95:7b:cd:72:f1:8b:8a:48:8e:fc:20:2e:dd:00:90:d2:95:
2c:0c:b5:03:a7:af:a3:18:2c:73:79:cc:2d:47:af:16:de:d4:
12:45:68:72:d8:c2:c0:ac:da:bf:ca:f7:1f:df:b7:f1:42:03:
23:da:0f:06:70:b1:7c:90:f0:69:78:95:0d:7e:a6:d0:27:56:
95:0f:f3:14:94:2a:d9:2d:e5:6e:0e:7e:55:1f:58:b6:3d:63:
8b:5c:f6:89:95:c5:60:1f:4a:8c:ad:6e:c3:30:a1:7c:ba:25:
e3:32:47:e3:de:47:8b:c6:0b:5b:91:52:49:12:0a:52:35:73:
2b:62:ac:f2:6f:f7:a9:bb:eb:6d:ff:a4:41:11:4b:e1:cc:ae:
48:e7:a1:64:7e:a7:99:02:d7:83:ba:f1:dd:6a:29:31:87:65:
80:7b:83:34:b1:87:4a:21:36:c1:4f:28:c8:58:a0:05:b7:bb:
7f:0c:7d:b9:5d:a1:2c:6d:b1:43:08:41:88:6d:56:d2:e6:c1:
f3:d4:64:71:c8:77:96:3a:ad:3a:19:7e:28:a6:90:ae:98:d6:
40:8e:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:34 2025 by rpki-client