Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier: P2FJeXlJWfzysgtiW97YziYg9+RDr5tYhlHc+N/BnoQ=
Subject key identifier: 1B:CD:A5:F0:C3:47:0E:55:FA:29:FF:77:BC:79:CB:DA:AF:63:8F:0B
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 01974667318BB771228B2B56C0E2AF89C146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number: 0F35
Signing time: Fri 06 Jun 2025 18:00:57 +0000
Manifest this update: Fri 06 Jun 2025 18:00:57 +0000
Manifest next update: Sat 07 Jun 2025 18:00:57 +0000
Files and hashes: 1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: CfP29HpPHlMXge6cIfokaMUEDBzpTSOTPwxM661DhE4=)
2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:31:8b:b7:71:22:8b:2b:56:c0:e2:af:89:c1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: Jun 6 18:00:57 2025 GMT
Not After : Jun 7 18:00:57 2025 GMT
Subject: CN=1bcda5f0c3470e55fa29ff77bc79cbdaaf638f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:9a:ef:67:7c:61:e6:70:53:57:45:57:b7:
18:bb:eb:25:0d:59:e9:23:35:b0:9f:ff:5e:f2:de:
8f:63:50:83:9e:d4:51:f0:18:5e:06:31:81:84:a7:
7c:58:56:ec:c9:b7:08:2a:a0:f4:b0:aa:ff:3d:11:
f4:4a:f9:2c:14:4e:16:64:e8:6e:6a:d8:7a:c8:c7:
1a:f5:9e:66:37:af:51:ba:3e:79:d3:9a:40:f2:69:
31:be:54:4a:68:27:22:f6:88:ff:cd:8b:b3:ac:64:
3a:cc:22:9a:01:a0:70:f1:81:97:0f:a4:fc:35:8f:
4d:26:ce:84:49:bf:f5:5e:d9:e5:b9:7c:d4:eb:8e:
78:1b:f6:5c:5b:6f:e0:74:78:14:e5:85:16:c2:db:
d3:28:f6:ff:f4:df:4b:46:ca:eb:8d:cf:c8:8b:b0:
8f:86:4c:6a:56:f9:be:30:48:f3:bf:67:29:98:3c:
ce:01:4f:ae:23:3d:3a:f6:56:cb:91:7f:38:c9:00:
7e:e1:81:a2:bd:d2:5b:23:d0:20:d1:60:53:ef:56:
19:a9:da:c1:e7:14:fb:51:9e:45:24:bb:2d:6f:64:
d4:88:4e:0c:e6:81:b1:71:d8:51:f0:3b:5d:e3:b5:
f8:92:57:d4:03:f2:bc:71:5b:9a:19:74:63:ae:c7:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:A5:F0:C3:47:0E:55:FA:29:FF:77:BC:79:CB:DA:AF:63:8F:0B
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:e0:57:c4:3b:57:86:e9:9d:be:9d:10:39:3b:78:2a:4a:
2c:c4:dc:72:42:25:0b:75:c6:25:30:97:03:c2:73:4a:ad:42:
6b:f2:0f:f1:1d:0b:47:a3:16:68:97:63:27:9c:04:02:b5:05:
13:23:20:92:71:d5:e7:10:2e:0e:28:d2:d4:5b:51:c8:08:b9:
26:63:2a:e6:39:83:2f:20:5a:16:5a:c0:5b:e9:28:6b:9d:a6:
eb:7d:35:8a:14:ac:21:71:ab:ad:a9:d8:88:f3:ea:b8:59:e5:
c5:2c:31:86:dd:86:f5:39:89:ea:58:17:54:bf:2e:3c:6c:92:
29:08:bd:2f:15:04:73:b1:b5:aa:cc:04:af:ba:38:ea:ec:9e:
7a:b0:64:a3:ce:47:6f:1b:86:a1:08:db:ab:a5:59:9a:a7:c9:
86:e7:c0:88:64:3c:2a:a8:76:6d:bd:4c:ea:68:93:44:b7:b6:
7a:0f:55:f0:d4:ac:b5:91:01:e8:38:6c:42:0e:00:b6:bc:6e:
54:12:51:24:89:60:22:ad:01:cf:cc:4b:92:06:ad:12:9b:44:
10:6b:fb:9e:c1:43:2c:26:1a:57:57:de:2f:1b:11:48:a7:3d:
79:7c:68:41:45:7c:c8:53:bb:e6:a9:87:d6:eb:05:28:10:49:
d8:7b:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:29 2025 by rpki-client