Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: qy2g8jSqq/0pHy8UlY54uS4u0xi/Qhvw2t0049i9Cjw=
Subject key identifier: D4:40:2C:0B:98:9D:6A:3C:33:EF:A6:4C:BA:78:27:A7:D5:57:5A:1D
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 01974E57B381157D1BD9057D9B0300757D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:00:59 +0000
Manifest this update: Sun 08 Jun 2025 07:00:59 +0000
Manifest next update: Mon 09 Jun 2025 07:00:59 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: OYKBSNVZEssjzU6l9j8FN0nIA6KR3sNNENZCqiRbUGg=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:b3:81:15:7d:1b:d9:05:7d:9b:03:00:75:7d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Jun 8 07:00:59 2025 GMT
Not After : Jun 9 07:00:59 2025 GMT
Subject: CN=d4402c0b989d6a3c33efa64cba7827a7d5575a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:f0:11:95:b1:20:3e:33:96:1b:b9:38:2f:
d5:00:32:d1:05:00:c5:d4:47:cf:2d:6d:de:18:f0:
95:da:83:74:e1:58:ac:0e:19:01:e3:1f:5e:ac:c3:
2e:52:6f:8b:dc:67:cb:a2:f9:6c:8a:d0:de:b8:88:
41:a3:9f:fc:05:f9:cb:53:47:45:e2:8c:38:56:31:
98:9b:e6:d8:c5:be:d0:36:be:03:00:b3:7f:9b:97:
88:59:7d:8e:ff:46:b4:d7:84:1a:f0:e9:d7:ba:e1:
9c:83:ef:d8:b2:43:fd:39:e4:26:17:d1:9a:c7:87:
d3:6d:b5:c1:ec:af:59:02:95:32:ed:89:cd:60:67:
25:6f:6b:8b:2f:dc:e7:b0:7c:b9:ed:f8:3a:9c:b3:
64:fb:60:2d:c6:b4:47:4d:9e:07:90:92:0c:67:ab:
fb:2a:8d:dd:60:70:71:b0:0e:94:f7:30:72:aa:9d:
b1:6b:2f:f4:50:f0:22:5b:ae:84:94:19:e8:05:c2:
7d:09:be:4e:dc:51:a9:22:c5:38:14:f3:22:4d:ee:
ab:ae:aa:d7:56:bb:ff:88:e8:86:6a:92:08:b7:7b:
55:bf:70:19:39:90:61:05:fb:7a:dc:8b:42:a9:04:
09:05:ad:9b:b4:60:bb:f9:10:94:8e:05:ec:f0:d4:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:2C:0B:98:9D:6A:3C:33:EF:A6:4C:BA:78:27:A7:D5:57:5A:1D
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5c:35:57:65:85:09:4a:cf:3e:c7:21:73:93:20:fa:d9:07:
6b:5c:4d:57:ae:b7:ee:e8:b3:95:47:32:02:93:02:db:a4:85:
f9:e5:3f:2f:f6:a1:56:c6:a7:ff:c5:20:84:68:29:8e:a7:48:
a1:4a:24:ab:01:ea:78:33:47:55:e9:b5:4a:39:df:aa:62:d4:
dd:a5:c5:62:32:20:48:30:ee:f5:40:87:47:c0:fd:9f:16:e8:
aa:af:32:b3:e3:c0:c1:b7:53:47:49:f6:eb:6e:81:82:eb:15:
de:f2:9d:48:92:48:6b:03:8c:57:0b:18:15:0f:19:23:95:26:
b4:5d:53:4b:1e:da:1b:9a:24:52:be:ce:22:4d:c3:c3:ad:d8:
ef:dc:e7:e0:77:12:ac:7e:d5:91:d6:dd:35:b0:5e:a8:17:c4:
fb:2f:24:93:9c:d8:c2:28:46:f6:c4:6c:d2:8a:18:c2:90:23:
e2:a9:10:f6:13:f4:35:87:e8:f0:80:c5:66:cd:42:b3:4d:f8:
37:88:d8:c9:20:3f:6b:a1:7b:10:79:bc:84:86:88:15:f4:22:
f5:ee:46:6b:b2:8c:f7:25:68:fd:b2:13:b1:cd:0c:89:28:5d:
2d:65:69:a5:43:2b:30:a2:a6:7b:9e:3c:8f:38:0e:8b:a5:65:
df:bd:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:29 2025 by rpki-client