Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: ajYUcO1IPJHDP3pkn0Zv3m1Qk0cfhPWNxETMEK1S4Fs=
Subject key identifier: 08:8B:01:AC:6E:F8:32:8A:9D:1F:1D:B9:CF:7A:B2:36:56:74:5C:D0
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 01974E2035E936622177D8CEB5893A01961C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0A8C
Signing time: Sun 08 Jun 2025 06:00:23 +0000
Manifest this update: Sun 08 Jun 2025 06:00:23 +0000
Manifest next update: Mon 09 Jun 2025 06:00:23 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: O/aFyDljG/cpT4dPl9kAKQ26af//037xSLsvU3V+QRs=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:35:e9:36:62:21:77:d8:ce:b5:89:3a:01:96:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Jun 8 06:00:23 2025 GMT
Not After : Jun 9 06:00:23 2025 GMT
Subject: CN=088b01ac6ef8328a9d1f1db9cf7ab23656745cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:6b:4c:86:ba:7b:d8:a1:4a:12:52:ae:06:
fa:cf:33:41:04:b7:9c:09:eb:50:49:de:a7:aa:5f:
ce:0b:02:df:79:08:ff:e8:aa:71:d0:b2:04:bf:51:
dc:de:09:0e:b7:2f:6e:f9:66:98:6f:39:51:2f:aa:
6d:22:4f:b4:e3:06:7c:bc:fb:b1:c1:55:e1:ba:c1:
a2:ad:25:b5:7f:35:f3:e9:25:a0:38:44:f4:a5:bd:
fe:86:80:5a:34:c3:d4:ee:91:1a:c2:1e:6d:6f:43:
e2:b9:c7:c7:d4:6f:dd:86:c1:a6:4c:c7:51:e5:03:
21:dc:d8:54:19:f9:bd:81:2b:0e:aa:e9:51:8e:26:
ea:03:9b:13:9c:e9:b6:3a:5a:00:bb:d5:47:8c:b0:
48:3a:1e:95:c4:3d:4e:81:55:75:72:ca:f9:2e:80:
b0:a7:91:f1:8b:20:56:31:02:1e:2b:e1:e6:e6:a0:
4d:e3:5e:9a:a6:71:04:9a:df:81:c7:c5:cd:47:a5:
d7:b0:e4:e0:5d:78:13:21:d7:3b:f8:8a:80:e5:cb:
b1:c3:b3:ef:44:46:fc:43:67:58:00:ca:e8:9b:97:
f3:70:26:22:a2:b2:a8:fd:e1:bf:45:b9:c6:d7:1c:
c7:ce:d3:a3:a8:23:c7:7c:35:05:0b:bb:0f:ef:d9:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:01:AC:6E:F8:32:8A:9D:1F:1D:B9:CF:7A:B2:36:56:74:5C:D0
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:13:9e:98:44:f4:3d:f7:bf:df:dc:17:12:3d:ca:0c:8a:c4:
a5:3b:5d:8d:20:3e:55:94:29:29:0b:bb:dc:e9:b4:30:bd:92:
49:0c:ab:c8:e4:be:ae:2d:d1:06:a6:b1:9e:50:5e:b3:7c:e9:
30:cd:ef:ae:08:d3:d5:36:3f:bb:c0:da:33:01:dc:3a:77:05:
91:63:9e:bb:25:98:d7:ae:fe:5d:fa:c0:7e:7b:24:04:61:1b:
e7:19:ad:19:e4:ca:50:35:07:10:c1:61:45:55:43:09:71:9b:
24:5c:14:8d:08:db:ef:ce:3f:a5:76:07:93:a6:c5:c8:2a:ee:
6d:3f:de:83:40:ee:c1:b3:b8:16:bd:e7:8d:b5:4a:0f:00:ba:
54:b9:c5:17:d3:d3:c0:35:14:a3:31:f7:1f:6d:1c:31:c4:20:
98:19:89:f6:8d:3b:b3:0b:d5:7f:aa:4e:0b:e6:b4:b9:b3:52:
73:05:12:2d:71:1c:cc:4c:67:e8:7b:3e:28:28:b6:49:2f:c9:
e7:39:26:52:3c:f3:02:72:d2:7d:56:6f:b4:78:bc:14:d0:46:
df:ad:12:e3:c9:72:f5:0f:0a:ef:a6:fc:cf:47:08:9a:76:f7:
34:d6:e0:17:03:24:9c:cd:ac:de:2c:0b:b2:48:a3:cf:c3:ec:
12:0e:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:10:33 2025 by rpki-client