Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: MKUfug6ETs/d6pV5huQ3uVde+jexr6Z87IVgF6HAJ/A=
Subject key identifier: 07:17:B3:7A:E5:71:45:E7:A2:9E:02:CC:E5:3A:AA:CB:AC:61:2E:CB
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 01974A7A6299671C2AD877596597CF618C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:00:23 +0000
Manifest this update: Sat 07 Jun 2025 13:00:23 +0000
Manifest next update: Sun 08 Jun 2025 13:00:23 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: nzSdavjV9U/Qp8rfrUEbDM8gPBSgIRpO9ATAMgh0fhQ=)
2: QrmnbjgSygFDWHsO09VpW_iZC0c.roa (hash: VHw1+Cgx8Es+YaWERxb3+M1gB2Ndwqk8aRAjsalZIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:62:99:67:1c:2a:d8:77:59:65:97:cf:61:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Jun 7 13:00:23 2025 GMT
Not After : Jun 8 13:00:23 2025 GMT
Subject: CN=0717b37ae57145e7a29e02cce53aaacbac612ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:dc:19:3d:86:02:a3:7f:aa:2b:55:da:7a:
0a:b7:69:e2:2a:ce:c3:8e:e2:05:a6:86:10:87:8a:
f7:74:51:22:ee:a4:14:69:6a:3b:2d:be:21:7c:c9:
fe:42:4c:e0:6d:f4:aa:c8:46:00:8a:f0:61:fa:b2:
24:f5:02:79:ef:de:69:6f:cc:71:41:dd:76:12:ba:
f1:36:9f:c4:ad:b1:a8:d1:10:57:86:85:28:ab:d4:
33:de:fe:4f:37:0d:10:29:58:b9:c0:3c:e5:21:d7:
6b:58:80:97:34:19:b2:4d:17:a6:4e:85:8f:fa:3f:
7b:22:24:b8:e9:58:2c:f7:3f:4b:49:ff:97:1d:51:
ce:74:26:9d:3e:b1:b3:4f:e9:fa:96:1b:a8:83:8a:
57:ca:2b:10:85:bc:96:68:d4:35:11:b0:07:8b:bd:
74:d2:f1:16:c0:d3:a5:1c:0b:5f:e6:5c:05:42:6f:
86:ca:ec:58:50:9f:34:d4:ae:ca:7d:d2:7b:6a:f7:
1f:80:4e:7d:87:46:82:4f:da:08:09:05:b9:a9:1c:
00:4c:3e:28:2c:e2:1b:a2:66:8c:18:a6:97:19:cf:
60:89:b5:cf:e1:b7:76:b1:bb:1e:52:48:f3:10:a1:
fe:64:da:b0:ad:02:eb:2e:76:a0:41:43:21:51:78:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:B3:7A:E5:71:45:E7:A2:9E:02:CC:E5:3A:AA:CB:AC:61:2E:CB
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6b:a4:3a:9c:7b:6d:3e:28:bb:1f:1e:98:81:c4:1b:d0:4c:
65:e8:64:0d:2d:c8:5b:ff:41:f6:09:4f:ac:71:bb:ac:2d:ba:
c5:7f:47:ae:a7:1e:cf:d5:a3:40:99:91:ad:ac:c2:4f:5e:ab:
ee:e1:10:d2:5e:60:38:d8:2b:d9:80:0d:83:47:ed:66:26:4c:
b6:a7:dd:ac:3d:3d:ab:8f:56:72:d1:21:27:ef:f4:19:6a:af:
63:0f:c5:35:7c:93:46:3e:84:f6:26:2c:b1:04:de:3e:f3:01:
8b:dc:e3:75:0e:37:d9:b8:ba:f0:bf:c8:45:60:ac:b1:cb:70:
df:ab:86:d9:84:4f:39:73:a8:1f:df:3d:79:5b:2b:e1:c0:40:
c3:17:ca:ab:d7:a4:84:8b:11:43:ed:2f:80:d4:d6:55:42:ee:
3b:53:07:f8:85:86:92:6b:39:e5:d5:dd:bc:23:99:30:59:c9:
5e:7c:f7:a2:d8:94:dd:e1:bc:cc:2c:64:6c:1e:a5:f4:31:4a:
ac:cd:9c:a3:a6:e7:41:e9:71:bb:b0:33:fd:e9:f5:48:b8:fd:
b8:29:ce:8b:dd:25:44:1d:dc:28:cc:0f:c5:a7:a5:59:ff:40:
90:43:a3:04:50:f4:1b:87:85:9b:c3:6b:6b:09:5b:71:29:4e:
e8:44:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:03:00 2025 by rpki-client