Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: q6g5O/nrxwLOr6vEBMyaolWBwYjy1wGX9aVZGhJGwmE=
Subject key identifier: 9A:C6:07:89:FC:C8:F1:FB:10:A5:A2:74:6D:B9:98:19:2D:DE:19:F2
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019747E74CE09506AEC0D3FF7C1556DF809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 01:00:30 +0000
Manifest this update: Sat 07 Jun 2025 01:00:30 +0000
Manifest next update: Sun 08 Jun 2025 01:00:30 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: oO2vQDUf3qyh5Amkbc6AJC5WxNHTxgiSxiSXQkwA/L4=)
2: MAicR0R3ncVMTkKV0oZy3oBwEck.roa (hash: WaK4eGmwJjqB7bEEMx1lPorCW+4yf4wVwlYB8uvjgfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:4c:e0:95:06:ae:c0:d3:ff:7c:15:56:df:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Jun 7 01:00:30 2025 GMT
Not After : Jun 8 01:00:30 2025 GMT
Subject: CN=9ac60789fcc8f1fb10a5a2746db998192dde19f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:85:8a:4b:af:e1:a4:67:61:b8:a3:a7:15:
ae:48:99:66:2f:00:00:1b:81:13:08:a5:a7:88:f1:
b3:22:1d:45:62:3e:9b:71:a6:b2:1c:3a:25:b8:f7:
bb:9d:3e:86:50:90:42:df:fe:c5:79:22:4b:79:0c:
de:c4:9c:3b:c3:2c:ad:76:c7:d3:99:cf:72:42:2e:
7d:4b:f1:90:f4:a2:52:18:27:4f:26:28:9f:af:b9:
b7:74:8d:07:5a:fb:56:dc:d2:ef:60:8f:d0:57:46:
18:19:4a:45:9d:81:71:a1:6e:69:37:fa:a5:8d:69:
c2:96:ca:2c:d7:50:44:88:bf:62:1b:af:0f:fc:bb:
4f:24:c2:9c:60:8c:c7:0f:aa:b0:d5:91:2f:90:37:
4b:95:f9:bd:d4:6d:84:7d:c3:9e:99:2c:b0:62:43:
e6:97:54:04:bd:8f:c4:41:f8:bb:39:07:84:98:b2:
44:44:f9:a4:d6:b0:ba:3b:05:c4:2c:bf:4e:97:f2:
b5:92:44:d0:63:e3:1f:a9:e4:b4:09:01:eb:9c:44:
31:ad:84:1e:95:cf:06:a6:b0:3c:d5:19:0a:4a:b2:
5e:d9:ac:61:9f:b4:cb:4b:e3:e7:5e:06:20:6a:28:
86:b1:41:4d:4d:5c:a9:27:d3:03:47:d2:8e:55:23:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C6:07:89:FC:C8:F1:FB:10:A5:A2:74:6D:B9:98:19:2D:DE:19:F2
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:aa:d8:09:0f:71:d3:3a:8c:e9:14:da:e6:25:75:b3:86:
e3:3c:4c:fc:c5:2a:a2:57:9f:6b:bd:0d:0f:6f:1a:9e:fc:f8:
e0:17:6e:ea:19:ca:41:0f:fa:fd:6a:ec:ba:97:c5:c4:ac:18:
05:1a:b1:5c:b3:21:17:17:90:d5:42:c7:cf:e3:29:eb:d0:81:
f2:c8:5d:65:bc:5a:aa:dd:98:9f:1d:66:89:54:9b:52:24:e7:
2c:51:d4:e4:fc:9d:e2:6b:9a:6e:78:af:20:d3:62:53:41:9a:
1c:8c:e7:ad:94:92:75:da:c2:b5:56:4b:42:fe:40:53:91:22:
ed:36:ff:9a:3a:3c:99:b8:0d:73:ea:5c:60:95:f1:20:a1:78:
f0:b8:84:9d:89:3a:85:5a:e8:99:55:24:70:18:d5:bc:d8:f4:
e9:62:fe:9d:6d:3b:5f:f8:fe:61:8a:47:f5:6a:6e:d3:5d:7e:
cb:e1:a4:5a:43:65:f5:61:78:03:46:59:51:37:9e:b4:ba:f4:
fa:fa:b8:ba:07:ee:1a:bb:19:db:40:da:e6:87:1d:c3:ed:d7:
3d:d5:cc:90:8d:98:79:ee:64:84:da:36:29:5e:92:15:11:a2:
84:e0:a0:38:be:29:d5:5d:0a:b2:a7:f8:5b:5f:a7:eb:ff:ab:
7c:e5:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:29:08 2025 by rpki-client