Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: mHL08sX+fos7zOKrpJd93ianCuC171ybqhLT32zZAwg=
Subject key identifier: 81:38:4A:EA:2C:C3:01:9C:15:DB:FD:FD:3C:E0:AD:A5:9C:73:1D:56
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 0197485527D3BC12DE8F4A8E9F7FB78D1D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 07EE
Signing time: Sat 07 Jun 2025 03:00:29 +0000
Manifest this update: Sat 07 Jun 2025 03:00:29 +0000
Manifest next update: Sun 08 Jun 2025 03:00:29 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: XYiKxYVV0fma/9NKIqCY5l2K/8GB20oSJpBoU8DR000=)
2: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (hash: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:27:d3:bc:12:de:8f:4a:8e:9f:7f:b7:8d:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Jun 7 03:00:29 2025 GMT
Not After : Jun 8 03:00:29 2025 GMT
Subject: CN=81384aea2cc3019c15dbfdfd3ce0ada59c731d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:d3:d1:82:c3:e6:d8:42:3e:da:ba:9d:a0:
13:26:56:4c:b0:d8:50:31:69:c1:04:9a:4f:0b:1f:
6a:5e:a1:6c:6c:ae:f8:f1:1c:62:cf:f8:04:09:44:
ef:aa:da:da:39:9a:fd:d4:ed:9c:99:8c:23:87:81:
d3:c1:41:4f:f8:96:f9:a4:10:17:fc:f7:82:f9:10:
7b:26:ac:93:a1:db:c0:f3:5d:85:c4:9d:49:e1:34:
44:0a:fd:04:a6:14:5a:22:a1:8b:7c:7f:92:1b:08:
1c:1c:28:6a:6d:17:58:6d:2b:b4:bf:38:8f:ed:35:
6d:b8:cd:a0:22:57:43:34:dd:04:9b:05:f8:b3:13:
9f:d4:69:34:58:ae:78:6c:3c:73:04:35:70:ea:82:
c1:cf:ef:b8:fa:e8:6b:54:fc:dc:23:55:88:56:25:
2c:53:b7:8f:fe:37:13:ca:04:a7:be:83:cd:37:b2:
f8:d6:dd:dd:67:4f:24:20:17:6e:60:36:27:7f:f2:
77:f2:db:0c:84:69:65:54:a8:57:6a:99:d6:81:5d:
9d:7b:13:c8:d6:53:4a:41:a5:f7:59:8c:34:c2:72:
12:25:95:14:f7:0e:e0:cb:07:14:91:e6:94:fc:28:
23:55:df:b7:79:1f:99:3a:f2:79:f3:6c:ec:20:31:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:38:4A:EA:2C:C3:01:9C:15:DB:FD:FD:3C:E0:AD:A5:9C:73:1D:56
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6f:66:e2:44:eb:fa:16:38:5c:f4:a9:eb:90:11:a7:b6:c6:
4f:7e:cc:52:d8:a7:da:f5:8a:29:51:5a:0a:e8:13:bc:a4:04:
ef:3b:0b:6d:a5:f9:97:af:70:1f:b3:c3:d3:11:8c:7e:00:7f:
a5:f0:0a:96:53:ff:c0:ed:f5:fb:1c:be:71:63:32:e6:05:10:
8e:c7:6c:4d:f9:e3:5b:e4:92:ae:e1:5b:85:8f:cc:b4:1a:2b:
32:43:c9:81:08:df:12:3f:c4:d3:de:15:b8:16:1c:1c:cc:90:
58:35:0b:91:d5:62:33:69:6d:6e:4f:20:fc:06:27:d9:b9:d7:
b2:2a:bb:58:c3:44:1f:8e:58:bb:d9:26:10:87:06:40:98:c6:
a2:cf:33:58:9b:1d:7c:b7:b5:78:bc:4b:80:6e:90:8b:37:d6:
f4:fd:b0:ee:ef:cd:da:51:ef:65:90:56:c9:4a:73:7c:c6:7c:
42:d8:5d:eb:7b:82:9c:f3:8f:d0:c9:73:23:b7:d8:30:99:80:
02:d0:8b:64:51:32:be:a6:7d:49:c8:07:4c:a6:e3:a7:75:8e:
cc:7d:7f:d4:50:70:09:6d:18:fd:f4:a6:ab:ab:18:b9:28:6d:
74:a4:04:1e:06:25:57:f9:9b:79:d2:db:ee:68:55:bc:76:fd:
2b:f9:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:49 2025 by rpki-client