Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: RGwofTkDEu4vMZ+3H76L+aVrxEEgr7h6JqQ3Y9YKZP4=
Subject key identifier: A5:AE:8E:E3:FF:4B:05:F0:7A:BA:6C:B2:56:36:86:25:0F:60:B3:CE
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 01974AE82F44BBFB3338891C01BECEE0B63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:19 +0000
Manifest this update: Sat 07 Jun 2025 15:00:19 +0000
Manifest next update: Sun 08 Jun 2025 15:00:19 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: K9updpVpZyBel3WnEDO9+wkiAPwOCRS+br7SNxvD/Sg=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:2f:44:bb:fb:33:38:89:1c:01:be:ce:e0:b6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Jun 7 15:00:19 2025 GMT
Not After : Jun 8 15:00:19 2025 GMT
Subject: CN=a5ae8ee3ff4b05f07aba6cb2563686250f60b3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:d9:5a:72:5d:5e:32:a8:51:16:6b:1c:16:
57:d0:c0:55:eb:59:ff:5a:cf:7e:19:88:c8:0f:c7:
8c:13:77:36:b9:b8:56:f3:8f:ae:27:65:fc:a2:5b:
4e:b2:ba:b3:ea:03:24:22:0a:b0:77:4e:9b:fe:fd:
4e:23:b2:92:ec:15:7d:04:2b:4d:48:bf:38:be:b1:
e4:3b:ea:10:28:ba:92:36:38:7f:12:f6:d8:aa:d1:
98:9f:5a:ca:00:50:22:18:6a:dd:14:62:76:6d:07:
cf:97:ce:5b:26:d2:16:aa:d4:d5:19:e0:e8:58:00:
7c:61:81:55:b6:0d:40:97:4c:4f:45:22:9f:9f:e0:
8d:90:b5:fc:f7:d6:4a:4b:f7:89:11:df:be:5c:56:
ab:1b:98:6c:d5:91:d8:c9:4a:a3:96:51:98:28:31:
b2:9b:03:30:e8:b0:87:50:b0:96:1a:aa:09:fa:ae:
8e:2d:08:7e:00:89:52:8c:88:b4:cc:b9:2c:5f:44:
72:45:cd:15:32:5b:62:3e:af:33:e4:44:35:09:1c:
9b:cb:1d:4f:ad:69:49:39:35:bb:5c:c3:ba:b4:19:
15:cf:b1:62:f2:6e:72:29:71:55:31:16:a4:52:a5:
66:98:b7:24:1d:0a:dc:dd:8e:d8:11:88:a4:52:05:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:8E:E3:FF:4B:05:F0:7A:BA:6C:B2:56:36:86:25:0F:60:B3:CE
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:46:f1:e6:93:7e:68:39:8c:8c:61:65:82:a6:7a:00:52:
cb:30:d4:e7:91:d9:ef:a0:d3:de:54:86:8f:82:cd:91:f7:61:
74:e1:03:22:15:b5:fe:18:81:e4:3d:d9:d0:96:38:d2:0d:f4:
51:a3:fd:54:d6:bb:5e:fa:e5:10:26:0b:9b:ba:26:06:8e:be:
9a:18:ea:be:c0:34:cd:d1:b1:83:80:1b:7e:34:b8:e1:02:0d:
93:c7:e4:ac:67:f4:5b:50:34:88:05:b2:90:35:16:e6:47:85:
44:b5:7e:9f:b9:a9:20:a9:e6:df:40:7d:49:2b:bd:71:76:2d:
5d:cd:66:11:fc:8f:c9:c1:40:d8:0a:5f:87:b1:b7:94:43:0d:
14:3d:20:13:b2:45:46:10:51:a2:26:20:28:db:25:1d:be:28:
f2:f7:33:0c:b6:c5:ab:ac:34:f3:d2:6e:7a:76:25:fe:3c:83:
c9:73:8d:57:a3:93:8b:d3:44:5c:78:c2:91:b6:b2:6c:f2:eb:
67:62:7b:70:db:a7:c9:07:31:c8:6f:c6:d1:5c:8b:d5:4f:01:
f0:63:e7:0f:64:4d:d3:7b:7a:e8:7a:00:0b:35:d9:26:3c:ab:
90:9b:01:cd:15:d3:8b:d1:57:06:64:f9:b7:d4:b3:27:d6:fa:
9b:eb:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:56 2025 by rpki-client