Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File: rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier: A8byG9f9mM6lPXzHTyWW/3Y8PzG2MrZkHb8SO/TM6yA=
Subject key identifier: 49:B6:9D:1C:ED:B8:81:F7:20:43:7A:74:6D:F9:E4:1A:ED:77:19:FB
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 01974C324D7DABD8B674D6BC8E3E70B5BC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number: 04DD
Signing time: Sat 07 Jun 2025 21:00:54 +0000
Manifest this update: Sat 07 Jun 2025 21:00:54 +0000
Manifest next update: Sun 08 Jun 2025 21:00:54 +0000
Files and hashes: 1: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=)
2: iSXPGWrVDYVIEVR8cfFQwv7cBmw.roa (hash: X1bVncWHKP3XqHjUIeZ8VnviT3EO8UdWO3uc8hgbwFQ=)
3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=)
4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: TphpuRL0bTPT+ZupnwCePQ2iR4ptbcF5td0b21Yva9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:4d:7d:ab:d8:b6:74:d6:bc:8e:3e:70:b5:bc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Jun 7 21:00:54 2025 GMT
Not After : Jun 8 21:00:54 2025 GMT
Subject: CN=49b69d1cedb881f720437a746df9e41aed7719fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:f3:62:7d:15:ad:cf:ec:4b:9f:40:1d:c6:
d2:61:6e:c6:10:9b:79:5e:00:a8:8d:3d:06:61:71:
8c:e4:8f:7a:b4:d5:c0:b5:b0:13:3d:8a:d0:c2:9d:
f5:42:c8:b9:4b:33:ff:9b:96:3d:31:55:5a:5a:6e:
0a:ea:22:bb:11:54:eb:d6:46:67:09:0f:27:ba:53:
11:dd:3f:a8:9c:01:7b:15:77:ae:d6:52:89:6a:60:
62:32:ba:1e:14:8c:e6:ee:e4:e1:ea:ef:ec:67:38:
d8:12:4d:aa:bf:b6:2f:89:ed:c1:97:05:a4:23:a7:
f5:33:f2:41:11:89:2f:fc:71:1c:6c:47:ea:93:dc:
c5:15:ba:6d:b3:19:9d:e5:9b:51:f9:4a:a7:5c:b6:
02:6d:c0:f7:30:cc:d6:93:2e:41:29:f8:fe:83:f2:
1c:80:e8:18:70:4c:21:37:c1:c2:8b:44:55:31:06:
2a:44:2e:65:6f:8d:11:86:86:aa:b8:44:00:d2:3e:
08:ea:ef:fd:be:34:b5:99:a8:c0:54:7f:10:09:b7:
f2:5c:77:0a:8c:1b:23:8e:6e:f0:77:92:09:7f:40:
d0:a3:96:ea:77:dc:e9:96:b2:64:1d:f6:59:fe:19:
1f:d7:03:24:cd:13:8c:28:d5:0b:4d:c2:e8:77:a1:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B6:9D:1C:ED:B8:81:F7:20:43:7A:74:6D:F9:E4:1A:ED:77:19:FB
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:27:50:7a:96:b2:fb:15:53:66:bc:44:91:56:70:8b:66:42:
3a:09:ec:71:25:13:44:f7:53:5a:bf:35:75:ac:99:2f:51:ed:
48:4e:7e:0c:81:8a:cf:0c:90:76:32:5b:9c:e4:30:60:79:5d:
6e:b1:04:c5:b5:0e:14:9e:10:ae:d4:df:49:89:a5:a7:21:26:
99:0f:e9:7c:1d:8f:46:32:11:b2:0c:c4:54:7d:a4:d4:c3:4c:
b5:a0:52:98:d4:3e:c8:2c:90:83:74:b1:f0:b7:bd:8f:dd:78:
06:21:78:b5:38:0d:5a:6d:0e:81:e6:f1:74:8d:ca:47:fd:b3:
21:90:18:03:dc:ee:1b:44:db:99:50:ac:5f:57:29:6a:df:fe:
c1:91:8b:88:0e:1b:b3:8f:3e:84:a7:39:b8:f3:e7:42:9b:6b:
e4:8b:87:5b:5a:fd:18:b9:30:5e:ab:ea:41:ee:58:1b:97:f9:
1c:15:4b:50:1f:08:69:31:2e:df:1f:d2:e7:0c:02:11:fa:9c:
18:08:cd:dc:94:36:fe:07:4e:c7:46:88:10:db:4a:5a:ab:39:
56:6b:75:27:a3:c1:3f:0b:46:19:14:b2:76:ac:fe:c8:1d:91:
23:2a:9f:57:8a:fa:e1:7c:78:59:df:af:a6:11:3a:cd:00:3f:
17:fd:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:44 2025 by rpki-client