Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: SFL9syBfDvO4TF7tlDx/ukgf4XgFIhVif2Rr38EpeiE=
Subject key identifier: 96:55:4A:67:B6:01:9B:C7:4F:58:93:2B:06:84:B1:61:89:7F:F9:1D
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 01975D25D7F04296C915233013724D1F2AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 0357
Signing time: Wed 11 Jun 2025 04:00:50 +0000
Manifest this update: Wed 11 Jun 2025 04:00:50 +0000
Manifest next update: Thu 12 Jun 2025 04:00:50 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: W6weyORJy5Xe4dPgcLSJGs9PzPbdXCPnb/rQJTaairw=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:d7:f0:42:96:c9:15:23:30:13:72:4d:1f:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jun 11 04:00:50 2025 GMT
Not After : Jun 12 04:00:50 2025 GMT
Subject: CN=96554a67b6019bc74f58932b0684b161897ff91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:f5:b4:54:4b:35:cc:5e:d9:e1:6c:8f:4b:
0d:8c:f8:7e:57:d6:16:47:05:6c:c6:a4:4d:b4:d9:
d4:92:e5:cd:26:09:9c:f1:5f:60:b3:be:ab:3b:7e:
31:2d:ac:70:09:54:74:88:c9:de:ac:8a:ec:ba:21:
f5:ef:10:6c:1c:e8:dd:5d:af:2d:46:12:fd:84:63:
4e:0a:0c:04:b5:1f:cb:76:e2:44:1e:46:4d:0e:32:
0b:72:fb:f7:d9:da:5a:d1:d4:6e:db:73:7d:83:ab:
6f:e8:5e:a1:49:1d:87:60:11:dc:6f:00:5a:24:53:
27:20:fa:1f:6c:86:47:fa:c1:0c:13:df:9a:96:55:
11:a8:c1:10:db:74:a7:3c:c9:ce:34:39:ae:ec:4c:
4f:72:26:a3:8d:a5:ba:46:7b:29:5a:66:2c:81:df:
0e:bc:06:63:b3:d5:66:4f:5a:9c:12:d4:80:c3:7e:
c7:f0:9b:f9:0a:a0:48:2d:9e:fa:28:b6:48:ca:cf:
86:80:3b:bc:54:af:43:47:80:d5:c8:c2:9c:fe:c2:
ba:be:29:da:9e:79:7a:c4:3f:59:84:fb:b7:8c:51:
c8:3b:a2:8c:c3:15:71:0a:77:6f:40:64:99:43:b3:
75:1c:b8:b5:34:6e:9a:00:ea:ad:32:eb:41:4f:b1:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:4A:67:B6:01:9B:C7:4F:58:93:2B:06:84:B1:61:89:7F:F9:1D
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:2a:ec:24:0a:6e:df:ba:de:dc:6c:85:4b:65:7d:bc:12:fc:
e1:d5:34:d8:12:b7:bc:71:2e:f8:1a:74:1e:c7:d7:ad:47:11:
47:27:d5:2e:2a:2c:da:89:a9:ed:ab:d4:d8:85:43:ad:cb:01:
dd:2c:8d:ab:66:b0:9f:f7:c5:cf:fa:69:a7:25:8c:bc:bf:c4:
dd:32:cf:d3:5f:14:ab:21:2d:56:43:32:d2:ef:f9:c2:39:93:
13:eb:25:34:a7:a6:a7:eb:81:8f:0e:da:e7:c5:5f:aa:dc:23:
65:7a:eb:f5:46:b0:22:3c:a3:2e:14:b2:81:4c:5e:43:aa:63:
b5:52:5d:39:84:fb:40:02:9b:ce:b5:d6:49:66:81:bf:e1:39:
15:78:cb:e7:b0:e0:68:22:c0:f5:26:5c:d9:9d:34:b1:d1:8e:
54:89:0f:6f:44:ff:1b:09:06:14:31:c4:36:79:83:bc:f6:4e:
e7:4e:cb:16:88:05:b4:2a:03:32:d5:bf:a6:6f:d1:a8:e7:df:
0d:b8:f5:df:22:eb:74:b7:4f:4e:19:83:44:89:7c:e9:74:1a:
8b:bc:c1:21:11:c4:fd:40:e4:38:28:ba:3e:1b:e7:07:48:3f:
99:28:9f:4f:80:41:50:f9:9b:9b:20:41:8b:65:f2:e4:48:35:
48:36:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:33:12 2025 by rpki-client