Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: Y0hhd0wTVoaQ2dtXm04EDcobh2hBNwu4s520YSnPhuw=
Subject key identifier: B3:D4:9A:BA:91:38:3E:AE:0B:BE:DA:BF:11:B3:BF:41:A9:DF:47:89
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 0197481E2F067C59831FFA77F73B0A7A78B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0C09
Signing time: Sat 07 Jun 2025 02:00:27 +0000
Manifest this update: Sat 07 Jun 2025 02:00:27 +0000
Manifest next update: Sun 08 Jun 2025 02:00:27 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: ggwPRCVR6hAp424D9B4wP1iUV+/gv9TKvyXInmmsu9Q=)
2: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:2f:06:7c:59:83:1f:fa:77:f7:3b:0a:7a:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jun 7 02:00:27 2025 GMT
Not After : Jun 8 02:00:27 2025 GMT
Subject: CN=b3d49aba91383eae0bbedabf11b3bf41a9df4789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:6a:5b:96:71:52:62:34:dd:05:cf:bc:ec:
4a:b5:87:6a:9b:f9:29:5d:05:23:ed:d0:ec:8a:ca:
7a:00:e1:16:80:94:14:b2:27:83:22:ca:46:61:d7:
f6:a1:d3:0e:16:72:ca:fa:53:56:f2:64:65:ed:8c:
d9:ba:f3:3b:96:69:d4:b2:79:73:f9:50:10:fc:7c:
b9:01:3e:7a:14:44:9f:56:78:ac:09:ab:4b:2f:d3:
01:3b:33:3d:6d:88:9c:0c:2d:65:da:f2:02:83:5e:
dd:77:1b:66:6e:b5:5d:68:86:4b:19:d9:c2:12:b4:
0c:22:b1:c0:1d:03:e7:07:4f:e2:75:25:73:39:2d:
5a:38:74:d6:f1:81:4d:26:2a:fe:6a:19:23:8b:b0:
24:1c:80:b4:f6:09:cc:0e:f2:0a:f1:fb:8c:66:37:
a4:45:d3:a3:61:0b:0b:1d:ce:1d:75:40:5f:08:fb:
2a:92:e8:6d:b9:82:c8:e4:1a:41:7c:67:f4:01:3a:
5c:15:9a:ae:47:a7:c3:b8:7c:7e:25:ae:cd:be:1d:
83:90:65:1c:7e:fc:f8:ac:40:13:26:4a:ba:f0:bd:
cf:d8:5e:63:89:20:cd:6d:e4:a4:0e:84:fc:a1:ba:
a4:51:02:4c:a6:1e:c8:d1:88:2e:f8:a0:40:7f:ee:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:9A:BA:91:38:3E:AE:0B:BE:DA:BF:11:B3:BF:41:A9:DF:47:89
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:0a:88:ed:bf:7d:00:6a:97:6d:9d:e2:98:eb:71:de:53:
38:6a:6e:66:f4:9b:04:04:99:5a:46:af:dc:75:21:8f:dd:21:
64:bf:f2:56:80:48:4e:1c:16:8b:7e:6f:4d:8e:c8:e0:c7:39:
b2:8e:b2:cc:7f:bc:73:a6:14:de:ef:a8:04:dc:93:26:d9:49:
a3:5a:78:06:0e:27:ad:bb:48:74:83:58:64:f8:d3:82:49:0a:
a8:80:99:5c:0b:6d:5c:99:65:80:51:f6:6e:ec:1d:0a:21:9c:
4f:47:97:31:99:5b:a0:46:02:52:b5:71:c7:80:28:5e:0d:fa:
64:7b:9b:b2:60:91:d9:6f:a1:a4:ab:e9:05:3b:d0:6d:27:2e:
2f:31:46:94:08:3b:e3:a7:e7:26:36:30:5d:fd:43:43:6f:55:
e1:11:d3:79:b3:00:b7:40:80:a5:99:ec:3d:de:2c:bb:9c:26:
ee:8b:45:93:8d:32:9e:7e:ef:56:e5:52:5a:2d:23:73:0d:b7:
21:fc:2b:da:fd:0f:e7:01:d9:5d:da:aa:46:7b:12:58:0e:94:
47:3a:d3:12:2f:4f:40:db:0c:57:9a:69:dd:1c:56:1d:89:8d:
c6:4b:60:79:32:cb:e3:5f:ae:be:eb:6a:6a:fd:d5:d6:ae:f4:
a2:a6:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:36 2025 by rpki-client