Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: ifgrP08KBg/3N06LFzJZxpENFqmET8wa/JdFalrLn24=
Subject key identifier: B2:75:7D:F4:59:90:09:A6:EB:73:F0:9F:31:63:C7:6A:99:3D:97:1E
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019761023C63045BDC7D6FB8088DADFD38E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 0359
Signing time: Wed 11 Jun 2025 22:00:25 +0000
Manifest this update: Wed 11 Jun 2025 22:00:25 +0000
Manifest next update: Thu 12 Jun 2025 22:00:25 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: 3nidEFYLrTkiA0YINWh9yFdWvqIn8jr1GUhj06iIxRg=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:3c:63:04:5b:dc:7d:6f:b8:08:8d:ad:fd:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jun 11 22:00:25 2025 GMT
Not After : Jun 12 22:00:25 2025 GMT
Subject: CN=b2757df4599009a6eb73f09f3163c76a993d971e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:74:62:2c:26:6a:01:e9:b6:87:86:6b:34:
ae:a4:23:07:8c:78:ce:01:87:68:13:80:40:26:11:
10:ce:42:3a:d3:0e:1e:89:83:11:f6:dd:a1:54:06:
ec:94:61:52:1c:60:c4:7e:c5:29:87:9b:a7:dc:5a:
36:c7:1a:12:67:e3:cd:71:bf:78:7d:8d:a6:c5:15:
fe:f0:9e:7f:ac:4a:b3:37:0b:d2:26:6a:d1:83:00:
69:34:d5:30:b6:eb:d5:a4:32:4a:4b:a3:c8:a1:47:
38:c2:0c:e6:9c:c7:5c:0a:d2:73:6e:52:83:38:89:
f5:58:25:3e:ae:28:54:6f:19:0f:e6:9b:34:92:61:
78:93:81:b7:b6:e3:0d:d1:c8:87:7f:36:f5:da:15:
e2:1b:09:07:0c:51:5e:e4:4e:1e:cf:00:67:35:05:
6b:8a:ad:90:a5:19:93:4b:94:97:b0:dc:20:ed:46:
f0:82:b1:05:fe:37:b4:46:b8:1c:cc:5e:a7:ac:94:
a7:85:61:63:53:f5:d3:ec:ae:e5:c7:0e:e7:ec:6c:
1b:e9:ea:55:c3:85:54:79:5e:3f:5b:bc:ca:d3:c0:
7d:2b:f9:8e:97:2c:61:95:94:b0:02:78:65:17:e2:
b0:3b:dd:83:17:43:1a:58:77:95:f3:83:fd:f7:01:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:7D:F4:59:90:09:A6:EB:73:F0:9F:31:63:C7:6A:99:3D:97:1E
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7e:93:20:9e:71:df:8d:6f:a5:ae:16:74:bd:46:b9:6b:a7:
f1:8f:99:f5:e6:57:eb:84:45:f0:d1:83:12:ff:dd:2b:a9:a6:
c9:9e:e2:ee:00:18:48:a5:78:73:07:bf:38:1e:b6:bf:d7:44:
f8:5b:be:8d:29:f2:a7:41:79:7d:13:09:65:83:f6:03:b0:bf:
a8:25:45:b3:91:55:8b:71:5e:a5:df:fe:33:ef:9e:f8:c4:36:
4e:37:4b:a0:85:fb:16:63:67:29:ee:b6:2e:5e:99:f9:c4:fc:
ca:0c:38:ab:95:1e:64:1e:18:27:d4:d5:1a:22:1e:ed:a2:b3:
49:53:ee:1b:04:b5:32:e0:9e:b8:b6:65:c3:d6:2c:9f:cc:be:
c9:87:c7:f8:99:ea:78:71:ec:6b:10:7f:2a:7e:e8:1b:49:3e:
84:f0:64:10:db:26:e1:17:5a:c3:0c:2d:37:e0:17:83:4d:4a:
d0:3e:fe:e8:c6:11:a3:a5:1b:ba:1b:f4:c7:56:21:ff:d1:90:
2a:15:2c:42:6f:e3:6b:91:88:f7:7c:92:f9:2b:16:58:79:9f:
fe:cf:14:32:7d:ff:fe:96:99:9e:2a:51:d9:99:56:a4:65:3e:
12:f5:ce:09:be:e0:4b:fb:ba:97:97:72:be:e8:6c:4f:a3:a6:
11:db:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:55:25 2025 by rpki-client