Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: RUvKXfOWDWoGAwjQ8v6QAoCr4w1JXsBwLL/p0ZMVAFc=
Subject key identifier: CC:0A:79:0F:F3:30:C8:FA:4C:36:CA:50:BA:A0:2E:C0:71:52:54:F1
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 01974BFB295D8DBDD3E29C16C29824CCF247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 1357
Signing time: Sat 07 Jun 2025 20:00:40 +0000
Manifest this update: Sat 07 Jun 2025 20:00:40 +0000
Manifest next update: Sun 08 Jun 2025 20:00:40 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: T+MTeCsW5PpOiVUxT2zJFJi+lqTVaoS6Bq+3pXao5zE=)
2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:29:5d:8d:bd:d3:e2:9c:16:c2:98:24:cc:f2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Jun 7 20:00:40 2025 GMT
Not After : Jun 8 20:00:40 2025 GMT
Subject: CN=cc0a790ff330c8fa4c36ca50baa02ec0715254f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:e1:49:cc:f9:a9:b0:33:88:9c:dd:04:42:
5f:56:6d:27:91:2e:99:8e:d7:da:59:33:d1:4c:8c:
23:37:10:8e:2b:2b:e7:6b:e2:ba:aa:0e:c7:87:13:
e6:2f:07:93:90:c8:43:8b:6a:40:c9:36:db:71:af:
81:97:c0:66:19:42:e5:98:98:7e:ad:82:45:19:67:
a1:9e:85:a7:c8:1d:1d:58:43:57:2d:2f:49:b2:e6:
37:8f:93:aa:d5:41:41:67:8a:52:22:83:be:c4:58:
8a:ce:2f:89:47:ce:ac:0e:00:85:de:8e:b7:5c:15:
7f:b2:78:f1:09:99:d3:a6:67:53:fd:18:ba:6b:41:
19:01:fa:82:21:5e:7a:c9:5d:6f:a5:3f:6e:18:50:
86:ec:96:7a:67:11:57:18:21:a7:f9:e9:c6:95:95:
5f:c0:f4:6a:24:3a:ae:c7:01:e1:e9:da:5b:1a:f9:
aa:79:84:72:cf:d6:21:fb:15:5f:9e:7d:b3:5c:8d:
f4:31:c9:26:ce:e4:6c:15:9c:5c:09:06:2f:0a:86:
ce:93:df:a9:0b:45:4a:08:5b:43:15:3f:4b:ce:ca:
4c:2c:da:63:64:c9:1e:35:52:5c:d2:55:4e:52:b7:
b5:ed:1c:db:69:d6:29:9d:2a:5d:1e:a3:de:c5:6e:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0A:79:0F:F3:30:C8:FA:4C:36:CA:50:BA:A0:2E:C0:71:52:54:F1
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:ee:c5:e5:aa:d0:e2:2a:91:6a:97:c0:33:0e:5f:8a:bf:
bc:06:51:7b:21:f3:0e:a9:ac:a5:32:eb:c4:d3:68:c7:78:4f:
b8:6a:a6:3a:9c:47:a5:f1:5b:56:1b:7c:db:87:ff:a1:02:eb:
09:a6:c6:1f:96:62:b1:57:25:fd:ac:08:54:22:eb:76:0c:85:
b4:c0:0f:6b:89:5a:9e:e1:b4:fe:f6:ea:be:a2:46:c5:27:f7:
ee:e6:84:a5:81:14:9c:8f:56:5c:64:4b:ba:cb:95:f0:af:c6:
e8:d7:d8:d3:36:f4:35:3c:ce:b2:7f:cc:d5:c6:c7:f8:2a:d1:
da:7b:81:11:91:c4:98:ec:0f:a0:01:31:4d:bd:f3:96:fa:5a:
11:f4:99:84:05:96:88:59:0b:5d:f0:6c:d7:9d:95:98:11:16:
16:4b:48:90:37:4f:45:03:d3:b1:ce:94:01:bf:9c:c4:23:e9:
9a:6c:a4:17:c6:d4:bb:d5:db:fb:b5:a6:4a:23:0d:c2:87:6a:
c0:8b:cc:80:d9:e2:c1:4c:6a:2f:1a:0e:30:5e:ec:e9:c1:2b:
3f:5f:5e:5e:73:31:4a:0e:38:0e:94:74:ba:50:73:d5:81:f5:
22:51:2e:3a:6f:f1:d3:62:ec:4f:8b:26:bf:26:16:32:db:3d:
ec:6b:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:16 2025 by rpki-client