Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: KHs3OkS97DEW6hlJEVQ8wYQuu4BfLCQ9X30xkzz90NM=
Subject key identifier: FA:1D:F8:72:39:A5:05:54:14:B2:7F:03:C9:AD:64:DA:A7:4A:AE:4E
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019759EE958DE11D2A93A14801BAE87ABD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0EF6
Signing time: Tue 10 Jun 2025 13:01:37 +0000
Manifest this update: Tue 10 Jun 2025 13:01:37 +0000
Manifest next update: Wed 11 Jun 2025 13:01:37 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: izLuB+bnepwNu98CkUkLiW1G5r9V3hY1rCbbLz3qlOo=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:95:8d:e1:1d:2a:93:a1:48:01:ba:e8:7a:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jun 10 13:01:37 2025 GMT
Not After : Jun 11 13:01:37 2025 GMT
Subject: CN=fa1df87239a5055414b27f03c9ad64daa74aae4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:96:48:e8:fa:ef:f5:4b:32:17:ba:11:8b:
b9:06:b0:55:1d:a1:48:bd:99:d1:72:dc:1e:55:64:
a9:3b:47:1f:07:9a:a3:09:08:e8:7a:3f:19:06:55:
29:4c:84:02:e5:5c:36:95:67:70:8d:8c:82:ca:23:
6c:f2:06:b5:be:77:c0:1c:98:63:06:04:4d:3e:28:
45:18:83:20:e9:90:04:69:e1:65:11:0c:1e:1c:ff:
74:8b:68:23:b2:77:aa:38:c0:98:8f:ed:b0:e1:fa:
8a:98:70:c0:5d:66:40:43:77:b5:72:38:90:6f:5f:
41:04:bd:6a:19:ff:f7:d3:b4:eb:eb:33:c4:e3:c7:
9e:a1:7f:66:27:fd:67:a1:c2:5d:6c:4e:76:1b:6a:
47:24:a0:47:6d:fe:30:1c:44:41:b2:dd:f3:09:7c:
93:30:2c:62:22:55:30:4d:c1:1f:e1:fc:ba:92:b0:
a1:c0:b0:00:e1:8e:eb:84:fe:57:b8:63:41:50:37:
01:6e:53:58:c7:44:61:e9:bc:85:39:4f:dd:43:26:
95:d1:50:af:16:08:14:5e:33:95:e1:94:d9:9c:6c:
4a:5d:e0:e9:d3:67:51:ae:df:91:bf:4a:92:bc:ce:
3f:8c:44:0f:b2:f1:eb:96:fb:e8:33:19:f7:b7:d0:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:F8:72:39:A5:05:54:14:B2:7F:03:C9:AD:64:DA:A7:4A:AE:4E
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:f7:3d:3b:d7:82:df:f2:1f:22:f0:a2:9b:6b:35:db:cd:
a1:46:d6:cc:4c:15:b1:aa:f3:65:79:1a:c7:56:f8:54:52:7d:
fc:b9:ed:b4:2f:8f:40:b3:35:38:f8:f7:75:fa:24:36:cd:c1:
4d:08:5e:18:fb:85:fb:5e:f2:c6:b3:f7:7e:4a:78:93:d0:0b:
90:a3:4d:5f:f6:17:e2:33:04:a7:e6:fd:01:cd:e7:89:5d:c3:
af:19:b7:d4:86:35:a0:d8:09:9e:c7:20:6e:3d:31:f6:00:e5:
c1:78:9d:a8:56:69:e3:bc:63:60:41:b0:7e:38:2e:76:4d:38:
10:45:cf:cc:e0:fb:30:9d:7f:d0:9d:26:da:79:0b:ae:98:88:
96:25:70:17:66:0c:95:df:46:6d:dd:d3:e2:9f:45:1e:4b:64:
cb:f2:c6:e4:2a:a4:b3:9b:e0:6c:32:4c:6c:0b:10:d9:8b:5f:
c5:f0:83:1d:3c:ac:29:17:05:2f:07:2e:79:54:ff:0d:95:12:
8b:87:25:65:d0:f1:6b:54:4f:97:8d:8b:a8:8a:3d:fe:ac:77:
55:7b:82:db:37:5e:98:d7:f2:5e:3f:e3:4b:f0:f7:37:e2:48:
eb:45:2f:83:44:de:8b:e2:7b:7f:d8:13:5d:65:74:4a:da:86:
1c:a4:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:50:21 2025 by rpki-client