Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: BaGgZAJUuoNCFWJ2wr/bD0YyrS+SB7/uDOwyCsnPs+U=
Subject key identifier: 9E:8E:D3:E2:E7:75:3B:99:B1:CF:7A:BC:4A:5D:F4:F7:E2:EA:E0:F7
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 0197470B8F6795EC047F2573B48E510BA491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 21:00:29 +0000
Manifest this update: Fri 06 Jun 2025 21:00:29 +0000
Manifest next update: Sat 07 Jun 2025 21:00:29 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: wBEfIVYpwOLW2AqPBofp/47U/HsAKKLD1xtsK03dRFQ=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8f:67:95:ec:04:7f:25:73:b4:8e:51:0b:a4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Jun 6 21:00:29 2025 GMT
Not After : Jun 7 21:00:29 2025 GMT
Subject: CN=9e8ed3e2e7753b99b1cf7abc4a5df4f7e2eae0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:1a:f7:a9:2e:b4:88:b7:09:31:1d:cb:39:
c4:43:de:ee:6d:1f:b4:99:50:e6:5f:35:37:9f:90:
94:24:ca:c9:7d:58:a9:21:f2:52:a2:f3:54:32:b2:
a9:09:3b:64:15:0b:0f:7c:92:b4:0b:2a:2f:c7:bc:
d1:e7:82:1b:36:c3:1c:43:dd:b4:e3:21:84:8c:66:
32:3a:da:7b:72:7c:f8:9a:e0:b1:52:89:c9:8e:3a:
80:b0:22:4e:f9:21:2d:62:7f:4c:9b:a5:c7:08:02:
f2:53:ca:4f:f0:ac:f2:3d:54:45:25:f8:4f:dd:b2:
c3:04:40:ca:44:a6:dc:ee:23:d8:a8:4e:97:a6:14:
11:65:db:09:c0:37:81:54:fd:10:73:50:23:c8:fd:
dd:31:f2:a4:54:2d:5c:90:81:bf:d5:95:62:34:8f:
4b:d2:84:fd:91:19:af:f4:7a:2c:bb:21:53:8a:58:
13:35:a5:5c:fc:a7:1c:33:d4:0a:c8:6e:0e:dd:67:
07:26:41:9f:9a:f5:c9:63:41:2b:1f:bb:13:5a:b8:
ed:20:0c:15:c8:09:f9:1d:9f:77:0b:f8:b2:38:01:
30:a3:4c:2a:1c:d2:c4:1a:4f:09:31:dd:cf:38:01:
1e:9b:d0:40:32:fe:8e:71:d9:f4:1b:0f:7b:01:fc:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:D3:E2:E7:75:3B:99:B1:CF:7A:BC:4A:5D:F4:F7:E2:EA:E0:F7
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:e2:3b:31:1d:db:ef:49:b2:2d:e7:62:9f:a6:a9:46:d7:
11:30:e8:a2:2e:c2:a9:9c:2e:56:13:37:0c:84:d1:f1:52:62:
01:ed:17:3f:9e:5b:45:5e:95:74:10:03:3e:65:aa:56:86:0e:
0d:02:55:b4:52:90:9b:c2:cc:4b:a3:bc:a5:98:0d:9e:f5:01:
8c:2b:55:04:1c:14:4d:04:f4:73:d1:94:31:f0:5a:fa:61:96:
24:b0:28:14:4e:57:1f:f9:87:0f:f4:cb:65:b9:78:f2:d3:e5:
f9:cf:f3:74:28:07:37:5a:fc:95:29:5a:01:7f:41:b5:f4:fd:
fe:d5:ad:62:99:bd:aa:ca:1f:08:87:fa:2e:67:e6:a5:7d:b0:
1a:0f:ef:aa:1e:28:64:41:e6:87:fb:29:03:db:22:8d:3c:a9:
14:6d:5e:1a:f5:c5:ec:b9:d4:ec:93:f4:be:87:84:67:56:bc:
03:d4:59:a7:37:fd:95:16:e3:5a:47:ae:57:cc:cd:d5:8f:41:
89:ac:8f:a5:5c:fe:f5:cc:d6:63:d9:89:5f:2b:41:d8:86:8b:
6c:8d:d7:57:5a:1e:b1:d5:8c:ac:00:19:52:54:d1:47:23:ac:
09:03:a7:b3:f5:b1:ae:58:35:d1:d6:f2:bf:2a:12:28:3d:0c:
25:69:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:39 2025 by rpki-client