Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: 2VZj3wBfsOkWHJRzB6RGmBSIuSFQtWq/h/rj4K1WK/c=
Subject key identifier: 03:A6:89:2F:F8:73:46:A6:50:35:89:05:DE:F1:8B:0D:FC:4F:F7:7E
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019746D4D305ABAF7FAC6520FDE29324DEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 20:00:42 +0000
Manifest this update: Fri 06 Jun 2025 20:00:42 +0000
Manifest next update: Sat 07 Jun 2025 20:00:42 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: P2ohDNuyaygDG9tSo6Pv1YD8UD8vicDj5gcdK75jmDk=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:d3:05:ab:af:7f:ac:65:20:fd:e2:93:24:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jun 6 20:00:42 2025 GMT
Not After : Jun 7 20:00:42 2025 GMT
Subject: CN=03a6892ff87346a650358905def18b0dfc4ff77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:d3:50:06:26:cc:9e:81:bd:12:03:b8:d7:
3c:9c:ac:1d:0b:4b:a6:3e:d4:63:75:12:a0:59:8b:
46:a1:ee:07:47:d7:bd:37:d4:8b:32:4e:e5:59:de:
58:dd:e6:67:ed:b0:e2:70:0a:e5:63:c7:74:10:84:
db:ad:f7:be:a4:49:70:3b:b1:23:4d:a5:b2:00:56:
f4:ca:c3:7d:6f:d5:7e:20:6a:7c:06:f1:96:62:0c:
3d:5b:f3:a8:fa:b3:4f:56:da:a0:e9:cf:cf:07:08:
db:c9:66:11:c8:88:30:37:c2:07:fe:da:03:fd:d8:
08:1e:ff:e4:91:83:7d:52:f8:3b:eb:8d:bc:41:a9:
e2:53:4f:29:46:3a:90:5b:72:c8:dc:87:b4:c7:28:
a8:60:08:aa:6d:8d:d0:68:95:bf:a7:fe:d2:af:2c:
e3:52:da:28:bc:68:40:c4:fa:96:a7:72:04:f0:5d:
46:1e:e0:6b:5c:29:89:f1:b3:1c:96:f1:6f:ea:39:
bc:1f:55:fd:03:91:f3:2d:30:cc:66:fa:fa:a6:0d:
3c:a1:c0:a6:71:7d:3b:4d:d8:fe:f3:fa:18:c1:a7:
b9:fd:70:e7:15:31:a6:89:60:6a:95:46:10:e1:a0:
9b:80:2f:fd:c2:08:89:c4:84:5b:07:39:97:9d:8e:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:89:2F:F8:73:46:A6:50:35:89:05:DE:F1:8B:0D:FC:4F:F7:7E
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:01:25:d7:cb:01:37:47:d1:5f:dc:a9:c9:08:59:6b:f8:e2:
5d:45:74:f5:e6:fe:24:04:de:e2:55:04:3b:4c:18:2e:86:54:
bf:00:1f:49:c5:d0:ca:29:95:48:d0:13:d9:1a:36:d3:df:aa:
fa:e7:b4:20:1a:6f:82:d9:89:22:9e:9f:97:14:30:a5:96:4a:
2c:a7:f0:79:8c:5f:13:f5:79:9e:81:9c:ce:fb:f2:1d:05:6b:
26:43:c6:f5:91:49:91:08:69:f0:e5:13:37:84:f4:2a:c0:1c:
cb:ba:2b:93:20:ac:b9:48:07:0c:7b:f1:ab:6d:9b:ba:08:e5:
23:2a:20:65:e5:f1:77:07:29:50:b3:ba:ad:3d:54:b1:ed:b8:
7f:90:45:45:bd:bd:bf:23:10:8f:6c:14:aa:c0:28:17:db:3a:
a6:6b:24:df:c8:76:d7:39:c3:a5:c7:8a:cf:d5:97:45:f9:40:
0d:a0:c3:52:c4:28:05:5d:10:36:03:1e:80:08:6c:ff:a2:e4:
3e:cc:9e:84:c9:bc:46:0b:34:f9:ee:e1:52:3a:aa:b3:f0:08:
d4:2b:44:6a:61:9f:71:62:a8:2f:32:58:db:ef:f1:45:c4:61:
0f:bc:86:3f:ea:1d:41:a8:b0:c4:c8:b6:cc:b8:04:1c:93:d5:
90:c1:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:14 2025 by rpki-client