Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: pc5v4p5LR0+Hf4oJEHeWzXhwplB1uLF8G7GSLrk0vCA=
Subject key identifier: 7E:C6:A5:20:53:78:BD:5C:7D:F7:FC:1E:EC:17:04:9D:F4:02:88:0E
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019747797C53923C2B4C032BB86D6A3F0D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 23:00:33 +0000
Manifest this update: Fri 06 Jun 2025 23:00:33 +0000
Manifest next update: Sat 07 Jun 2025 23:00:33 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: HN/Abtz4Sh5kwqfAoNsGUpMRMm+bu1eaZn2psszRX4M=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:7c:53:92:3c:2b:4c:03:2b:b8:6d:6a:3f:0d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jun 6 23:00:33 2025 GMT
Not After : Jun 7 23:00:33 2025 GMT
Subject: CN=7ec6a5205378bd5c7df7fc1eec17049df402880e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:fc:95:b3:ed:15:da:70:8d:f4:fa:72:d2:
3a:90:0d:21:e8:c8:96:cf:a7:d3:9e:30:05:86:6a:
1e:03:c1:87:c2:2c:9f:10:70:9a:dc:a8:f1:71:3a:
3d:6e:03:30:57:df:19:6e:96:12:45:e8:58:0a:12:
25:2d:6b:7e:4b:5f:f2:4b:16:8c:87:8f:8d:f2:06:
64:8f:c3:13:61:8d:8f:6b:5b:a0:4e:06:6a:cc:d8:
3c:43:4d:32:4f:9e:27:71:a3:7b:d8:b3:83:3f:40:
06:c3:de:18:de:31:cb:b6:54:7c:55:9a:98:79:6f:
b2:4d:a0:0f:78:0f:8f:d4:6c:93:06:83:8b:f0:f7:
1c:fe:85:a9:bc:2c:ff:5f:89:f3:f6:ef:9e:f1:11:
46:a7:c0:99:29:83:64:db:3f:8b:98:e2:c4:0f:5c:
2b:31:12:a3:c8:76:e6:d7:44:33:5c:f3:04:e7:19:
67:0d:e7:e8:54:14:0c:fc:ce:24:28:f3:eb:fb:72:
d5:dc:2e:40:8c:58:53:9d:ac:79:a4:7a:4f:2f:17:
23:61:3d:30:b0:36:f7:ad:d9:ac:d8:36:26:70:33:
b9:86:5c:ff:22:bd:09:b7:5e:67:a6:a3:91:86:73:
1e:d5:a3:f0:59:37:c0:8f:26:c2:83:83:a7:de:02:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:A5:20:53:78:BD:5C:7D:F7:FC:1E:EC:17:04:9D:F4:02:88:0E
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:18:2c:1a:8b:10:eb:04:b9:67:20:ed:e8:79:ef:27:76:a7:
73:f5:2d:1b:fe:63:68:9b:b2:d2:20:1a:8b:ad:78:4a:2b:75:
26:66:ac:46:99:cb:22:a1:3d:6a:a8:89:84:71:51:7b:10:ef:
29:a1:92:6c:25:f3:62:d1:bc:1f:e1:d0:46:28:cd:27:2e:da:
87:be:32:76:d4:cd:06:01:a4:68:36:28:11:ba:91:45:10:5e:
6e:fe:22:70:cd:42:55:10:4a:7c:c9:f5:b9:e3:90:a7:2f:1b:
38:38:88:34:55:1d:af:fd:0e:74:77:b9:52:e3:d7:32:a1:87:
b1:e8:20:ad:4e:fa:f7:57:83:d7:22:40:fc:7c:73:b1:49:af:
dc:6c:37:d2:48:00:94:7c:0f:ee:5e:f3:68:13:58:7b:5d:1b:
34:c1:8b:12:07:dd:50:4b:5e:8b:ae:a4:24:35:d8:2a:06:27:
b1:4e:30:10:b7:97:bd:32:7d:97:73:06:dd:f6:3c:da:f0:13:
86:86:09:68:26:0f:77:06:8b:78:54:d4:e9:4e:3b:c6:63:d8:
fb:e5:2a:18:79:30:cd:dc:1d:b5:04:53:ba:7b:83:e6:e5:d8:
59:a3:c1:1c:79:84:f2:50:c1:ec:23:66:95:db:bc:33:72:de:
9c:43:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:12:58 2025 by rpki-client