Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: kKhDcpK497wIR8ZgepmGWAYd+0kmhpZW+1BthOQAzfU=
Subject key identifier: 85:6B:5E:04:C9:1B:2D:50:57:30:59:F9:EF:18:18:66:22:60:5A:46
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 01975FB9C35031426A782AA11B4A32327965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0EF9
Signing time: Wed 11 Jun 2025 16:01:39 +0000
Manifest this update: Wed 11 Jun 2025 16:01:39 +0000
Manifest next update: Thu 12 Jun 2025 16:01:39 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: uXyBWeB2fymMgO+fbS4SGgDDhPCWf5oCUUDXQlI3LHs=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b9:c3:50:31:42:6a:78:2a:a1:1b:4a:32:32:79:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jun 11 16:01:39 2025 GMT
Not After : Jun 12 16:01:39 2025 GMT
Subject: CN=856b5e04c91b2d50573059f9ef18186622605a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:85:4a:7e:e5:2e:61:dd:97:7e:78:f0:29:
59:d0:67:26:b2:9b:c7:22:39:ef:9d:85:9b:9b:2c:
71:ad:8d:1f:68:b5:07:a6:a0:a5:55:6d:50:80:c2:
79:91:34:df:fe:92:65:d2:d2:2f:ef:ba:a2:20:e0:
6a:08:9f:f4:0c:33:82:35:12:e9:2e:02:29:7f:08:
93:dd:46:bc:11:82:29:e0:16:c3:05:2e:d4:58:c7:
e9:1a:d3:da:af:36:a7:13:eb:15:4f:94:e3:30:a4:
1f:19:c3:e3:b8:fc:da:51:09:5d:2b:fa:5c:ef:9c:
29:b7:78:55:5a:eb:46:1a:f0:23:ec:75:4a:85:0a:
df:55:34:e4:b8:c0:48:de:53:2c:90:ef:32:fa:ed:
b3:4d:33:26:38:07:f1:94:c1:fc:99:b3:3b:d0:f6:
de:31:3d:d3:2a:8d:27:dd:54:6d:bb:9e:cc:e0:4b:
58:e5:cb:dd:11:ac:7b:2d:76:69:65:43:08:86:79:
c7:59:d4:74:74:46:86:63:e6:0b:a4:df:14:84:c3:
db:7c:6c:d0:a3:bc:af:b6:3e:f7:b9:5f:a7:ab:ab:
21:aa:f2:ff:3a:bc:1d:bf:9c:9f:6a:f5:13:c7:b6:
58:dd:6c:1e:94:41:53:39:4b:74:c3:c6:41:e7:37:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:5E:04:C9:1B:2D:50:57:30:59:F9:EF:18:18:66:22:60:5A:46
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3c:06:81:44:51:05:94:11:ac:81:37:c5:44:b4:28:1f:05:
d7:18:04:6c:5a:99:68:ed:e2:10:5e:ac:a6:cf:3c:4a:c0:4e:
e1:07:49:25:97:18:a0:8f:b4:b6:44:20:ee:1f:3a:86:ca:de:
15:8b:79:db:55:c5:94:41:d1:75:af:63:5b:7b:05:34:58:06:
7d:81:f0:36:e1:c4:12:0e:82:9d:eb:9b:9c:df:65:8c:60:2d:
c7:8b:87:18:03:f5:3c:7a:c3:21:4e:3a:6f:00:47:61:95:eb:
77:a1:a9:f0:9b:d4:f5:df:c0:18:04:c5:a6:20:7d:e5:34:52:
6d:b3:27:48:e0:41:dd:e4:e6:5d:4d:91:30:6c:bf:5a:62:b4:
7b:54:0b:8c:e4:69:7e:1a:ac:ed:3a:97:78:52:c2:f0:1b:c0:
cd:98:f3:f7:ce:36:21:4f:18:d9:7f:7e:95:48:72:f7:fc:56:
62:48:49:2b:7d:9f:89:47:5a:ce:4f:54:75:bf:7f:4a:76:c4:
23:8c:b4:02:cb:8e:70:ce:d6:12:d0:43:4c:43:bc:27:3c:cb:
56:0e:e7:fd:36:51:d0:b9:4c:51:63:cd:17:cd:37:49:4a:48:
25:5a:04:5b:61:ae:d8:47:aa:c3:c3:ea:a0:86:70:18:f4:c3:
cf:b2:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:43:52 2025 by rpki-client