Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: cL6pscHvoCFPj6Ql+nJw//PJFIVftyec3zvBALs4bp0=
Subject key identifier: D0:1D:1E:C5:E7:EB:AB:F1:97:2C:C0:AB:44:29:73:8A:90:79:50:71
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 019749D5BBA228EE1782E715C63E79B01438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0BD7
Signing time: Sat 07 Jun 2025 10:00:33 +0000
Manifest this update: Sat 07 Jun 2025 10:00:33 +0000
Manifest next update: Sun 08 Jun 2025 10:00:33 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: 9yx5yq90BBKgIGqc33rVwqMMFxsjnTCCz50au2e+uW8=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:bb:a2:28:ee:17:82:e7:15:c6:3e:79:b0:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jun 7 10:00:33 2025 GMT
Not After : Jun 8 10:00:33 2025 GMT
Subject: CN=d01d1ec5e7ebabf1972cc0ab4429738a90795071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:44:5f:3b:f7:48:f0:ce:b9:d3:ad:e2:e6:
e4:aa:f5:42:c1:ae:46:6c:8e:2c:c4:5b:0a:2d:5c:
81:e3:e7:2e:5d:dd:d7:b6:7e:37:c0:cb:7a:63:fe:
2f:7d:89:fd:a0:77:e2:62:16:4d:b6:13:78:88:02:
03:71:90:ad:c2:95:fb:09:2e:60:9f:a7:7e:55:8e:
50:c0:f2:29:f5:8d:70:e8:96:45:6a:7d:56:72:dd:
19:e5:45:91:31:38:94:b9:6a:59:d6:de:44:b3:5f:
56:f9:4b:61:48:e9:3d:1f:42:02:d5:da:a3:2a:59:
92:2a:ca:e2:f7:08:4d:0f:1a:fd:ef:d4:e9:36:38:
e1:e8:f4:9a:7c:2c:4a:01:22:d5:0b:b4:12:a5:ca:
8b:37:70:7e:7a:af:a7:99:18:5b:2d:ec:fb:3d:34:
73:90:67:ad:78:5b:08:c0:94:68:e2:8d:55:dd:f0:
19:ad:f8:a0:fa:76:c5:50:20:c2:b0:8b:7a:3d:51:
aa:37:db:75:21:1e:f4:f8:d9:f0:08:d0:a3:6f:1b:
db:63:ed:7f:0c:8b:1f:65:dd:7c:74:12:b2:38:f2:
57:6b:67:63:b4:ef:ee:79:70:03:3d:3c:3b:fb:2a:
a7:fe:15:eb:2b:50:f1:8c:40:43:d9:35:5d:2f:6b:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1D:1E:C5:E7:EB:AB:F1:97:2C:C0:AB:44:29:73:8A:90:79:50:71
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7f:d0:00:5a:fd:a8:ca:35:89:33:6c:8c:df:18:e5:fc:c3:
78:78:54:e0:0d:49:e3:53:23:83:79:ae:fe:ac:bc:7f:e5:97:
37:98:d9:d6:0d:c9:f3:b9:9c:21:93:a0:fc:65:be:08:95:b8:
4c:d8:b3:c2:50:a5:6f:87:d3:5a:e9:e5:dc:d6:84:d0:e6:a2:
a7:73:5f:b9:19:65:7f:32:a5:33:35:60:42:0c:f6:e7:c5:93:
6d:cc:dc:ec:cd:c3:f2:50:0d:f7:47:53:3c:b2:c3:74:3c:24:
e5:b0:b0:ed:04:44:17:f6:df:7d:18:5b:b0:05:94:c2:62:9b:
f4:8d:e3:4d:f4:1f:79:00:1c:1d:74:64:ee:b3:65:b5:7f:13:
d2:68:2d:93:57:ab:62:aa:36:7b:87:55:bd:71:b4:0a:3f:ac:
04:39:3e:a8:79:14:73:49:67:ac:ae:00:a3:eb:f2:7a:62:1e:
5a:05:23:72:04:43:08:b3:c2:8b:5c:13:4e:ed:21:2a:77:92:
38:c9:89:0f:6e:02:e9:6e:0d:9f:40:15:85:ae:08:45:3f:57:
b4:c7:e0:1b:5b:e3:a2:d3:d5:6a:38:12:e5:8d:ad:23:d3:92:
c8:c0:74:93:4c:b8:6e:6c:03:9f:d3:4c:8c:49:bd:b9:3b:c1:
84:fc:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:35:21 2025 by rpki-client