Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: ykyhKMCShbSJl8K4KY7H2K90PO8Lws8ox3F1h4rosew=
Subject key identifier: 66:5D:1F:AF:B1:DC:92:18:DD:9E:EA:14:84:6F:72:BB:C0:9A:74:91
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 0197474301BCAB38B260E31567981FFAEF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0406
Signing time: Fri 06 Jun 2025 22:01:02 +0000
Manifest this update: Fri 06 Jun 2025 22:01:02 +0000
Manifest next update: Sat 07 Jun 2025 22:01:02 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: W+6CziZhp7WOredKMD3FUPFvUndrRk+hE3styzUQ99M=)
2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=)
3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=)
4: ducUWn7SmjDXSD2XK_HAZ4X-w1E.roa (hash: QsOlqkwJkHZw/RVRRDiq/I4YTQ51hDfHFRswj0zjjww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:43:01:bc:ab:38:b2:60:e3:15:67:98:1f:fa:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jun 6 22:01:02 2025 GMT
Not After : Jun 7 22:01:02 2025 GMT
Subject: CN=665d1fafb1dc9218dd9eea14846f72bbc09a7491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:54:09:e2:5c:d7:15:5b:ae:47:bb:50:99:e7:
23:ac:16:d4:54:0f:b7:14:71:0d:41:c6:3c:75:fe:
90:9d:98:8f:e6:74:4c:4c:97:d2:8b:63:0e:d9:26:
3b:10:12:a4:10:f6:9b:d5:37:d6:fa:5a:37:a6:e0:
cc:dc:c6:1f:1f:e5:19:3b:c9:c8:a8:5c:93:c8:3e:
a5:bc:95:6e:a0:5e:81:56:29:42:05:29:81:f5:f4:
8b:93:2b:1c:31:82:bd:3e:e1:9f:17:a5:5f:ed:8d:
5a:f7:ea:70:6f:f9:26:7b:cb:06:c4:cd:56:b2:a5:
2a:35:16:85:f9:44:a7:a8:46:2e:fc:a9:d5:a0:9b:
8d:b4:c2:a7:52:0f:45:b1:b2:5a:1f:fc:79:67:5c:
d8:82:d4:d6:45:7b:03:5c:0a:4c:17:93:f4:56:4b:
c4:b2:b9:5d:21:12:81:00:5a:d6:38:40:e3:f4:50:
89:ac:85:0a:98:54:07:0a:d0:cd:5d:80:3d:d4:8b:
79:50:93:2b:1b:17:6e:8a:d0:9a:b3:89:11:95:84:
17:a5:2a:ab:d1:ca:30:e7:96:73:a9:6f:f1:3a:2d:
cd:9f:91:18:a4:cd:b9:f0:c0:f4:a9:e9:d1:b6:40:
f9:fa:96:3a:28:40:a8:45:c6:a6:ef:59:00:6b:22:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:1F:AF:B1:DC:92:18:DD:9E:EA:14:84:6F:72:BB:C0:9A:74:91
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:86:78:a4:a9:8b:1b:8e:11:0d:9c:42:f0:8f:39:ba:58:b7:
f9:8d:67:30:64:bd:d6:d1:30:50:45:65:b7:59:05:7d:f1:bf:
cd:db:53:04:ed:a2:10:3a:6d:a4:89:3d:18:21:d0:ca:2d:5c:
ea:de:e3:af:4f:92:b6:84:d8:a7:ab:35:f8:00:f0:99:4c:d2:
96:38:39:82:29:4b:46:e9:cf:95:7f:fa:bc:ee:46:da:a0:fd:
2f:0b:4a:e5:a4:e2:22:fa:6a:75:14:4f:2a:d8:77:b8:d4:23:
80:ba:89:29:0c:5c:3c:e8:30:73:c9:dc:67:7a:c1:2e:1f:eb:
8e:fe:44:5c:01:23:3c:a0:ca:b8:29:aa:d4:b3:03:cb:f7:63:
0b:5e:f7:9e:c5:5f:31:10:0c:39:ca:e4:07:2f:3d:de:e4:1c:
c9:5e:ea:56:3e:1f:7a:fd:3f:5c:9a:87:d1:e4:37:2f:0c:ee:
4d:31:06:6e:a8:9b:22:16:bb:ba:df:bb:1f:a6:e4:33:4a:24:
13:b3:88:fa:15:09:13:0f:d6:45:05:ad:3e:5e:2f:07:2c:2e:
2b:3e:3e:b0:27:0c:a4:b4:fb:3e:7f:c7:38:19:cc:a9:cf:71:
9a:fe:a2:95:cc:44:ea:8c:fe:f3:20:0a:ac:3c:56:5c:31:4f:
1c:26:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:33:34 2025 by rpki-client