Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: oxDThdHk3MG//piBdZ0RCgTJ88sUgyxqjpy0yimE91I=
Subject key identifier: 31:F6:25:C5:3D:82:71:32:47:FD:BB:49:1F:A6:F8:CA:26:AA:46:11
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 0197561168EEE84EF938AFC0CEC235FC847A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0EF4
Signing time: Mon 09 Jun 2025 19:01:10 +0000
Manifest this update: Mon 09 Jun 2025 19:01:10 +0000
Manifest next update: Tue 10 Jun 2025 19:01:10 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: tZ65Fx5jGImdBTUXgaxb4R6bZEqIOhxBR8W88lCQi60=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:68:ee:e8:4e:f9:38:af:c0:ce:c2:35:fc:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jun 9 19:01:10 2025 GMT
Not After : Jun 10 19:01:10 2025 GMT
Subject: CN=31f625c53d82713247fdbb491fa6f8ca26aa4611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:bd:fd:5e:3e:d0:4c:3a:82:33:4c:f1:c9:
36:c9:05:05:67:81:7c:9c:81:fe:f7:5e:37:5d:50:
34:ec:56:4c:c1:f3:6a:50:56:d6:45:c4:66:10:af:
6f:29:9b:ce:af:48:3a:b5:da:e1:7a:5e:70:9d:66:
c3:45:8e:00:b8:7a:3c:1a:b7:82:4c:c0:85:21:1c:
0b:92:9f:c1:0c:c4:23:74:2e:bb:8c:1c:30:b0:fe:
58:2c:f7:7f:7f:bb:e8:51:9c:5b:eb:1a:58:0d:47:
74:2e:17:5d:30:2d:e0:44:20:34:6c:54:63:82:b1:
1f:86:23:18:eb:50:7a:69:1c:1b:33:46:37:d6:4b:
b5:2d:73:52:87:e5:80:79:d1:10:98:31:0b:22:f8:
67:09:99:ec:20:90:b6:1c:08:d6:a0:78:8c:5c:8e:
be:52:01:96:c6:b3:2e:47:a8:f9:78:86:f4:35:ed:
ba:52:20:69:f9:b5:bb:61:66:40:d8:fd:4c:7a:a2:
04:71:bf:21:fa:da:95:fa:a1:d0:1d:de:6c:09:57:
48:37:57:d9:e7:97:8d:5a:bc:3c:1f:fd:38:c8:1f:
c0:fd:96:91:b4:53:95:35:4a:66:f0:35:e4:d4:ff:
00:a8:f8:0a:2b:2e:3e:37:92:52:90:04:71:99:b8:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:25:C5:3D:82:71:32:47:FD:BB:49:1F:A6:F8:CA:26:AA:46:11
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9b:3b:1d:22:af:d0:bd:c1:ea:5a:bf:88:54:2f:63:6f:e5:
6c:a2:04:e9:ab:0e:f7:da:48:dd:5c:f4:e0:0b:42:33:a6:f4:
48:7e:29:e3:00:bc:a1:26:9e:f9:b6:81:ce:02:a1:2e:82:a3:
b8:a4:df:fb:0e:0d:34:f9:e5:f4:c9:b6:db:bf:04:0c:8c:82:
ce:74:92:13:6d:c8:0e:50:eb:44:18:f8:5f:47:4a:99:3a:aa:
97:5b:b8:a9:aa:6c:d5:0d:c3:5d:f3:ed:e8:57:ce:76:47:93:
00:92:c4:55:03:69:c9:b8:46:f1:f4:7f:8f:df:6f:f7:7b:22:
f5:1a:28:75:0c:0b:67:f7:5c:43:a5:e0:1f:68:1d:12:c3:41:
8d:ac:1a:06:fe:e6:77:b0:8f:03:82:b3:5c:30:56:c3:61:32:
7d:d6:fe:61:21:44:b4:61:97:47:d1:b6:bf:a6:07:3f:50:3e:
92:b8:ee:d0:af:4b:e0:dc:89:bd:f2:20:46:2a:1d:e1:53:ad:
f6:b5:4b:41:28:52:f0:b6:64:f0:ae:bd:0e:33:e2:7d:7e:09:
f7:6d:c1:84:c8:b4:d3:1f:d0:65:77:e4:27:03:b7:05:bc:29:
81:c3:77:65:2f:23:23:5f:28:ae:6b:d5:9e:5a:3a:fa:0a:9f:
55:4c:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:03:34 2025 by rpki-client