Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: t/if6iADYcIBfdn4fzgjLv1Uq/0RL9Q2EG5gMLymeRY=
Subject key identifier: 44:08:0F:FC:20:33:02:EC:94:25:AA:66:EE:FF:7F:CF:CD:FF:90:FD
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 019747B075231F7DC7CC4E1298387DE8AEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 10F2
Signing time: Sat 07 Jun 2025 00:00:36 +0000
Manifest this update: Sat 07 Jun 2025 00:00:36 +0000
Manifest next update: Sun 08 Jun 2025 00:00:36 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: uOMsgAnsTEWtLwvTDuZZKb7adjEgzrlxoIPk/0fS/Hs=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:75:23:1f:7d:c7:cc:4e:12:98:38:7d:e8:ae:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jun 7 00:00:36 2025 GMT
Not After : Jun 8 00:00:36 2025 GMT
Subject: CN=44080ffc203302ec9425aa66eeff7fcfcdff90fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:d4:f8:d5:f2:82:ac:ea:80:17:da:b4:31:
c3:6e:20:24:4a:51:ae:05:7c:43:aa:2d:b9:34:7b:
24:9f:8f:88:85:6b:91:c7:44:fa:36:20:70:09:1a:
d5:d8:b0:e9:d6:10:55:7b:b4:80:7b:ad:46:88:44:
d7:a6:2a:df:90:c1:be:af:4c:83:ed:15:ce:bb:da:
3f:12:6a:27:bb:96:3f:90:48:94:48:6a:80:d4:6c:
93:62:10:c9:3d:ba:b7:7e:95:71:56:54:b4:fd:49:
5f:ba:8d:6e:31:0d:a0:2d:80:53:ba:a6:85:1f:e5:
88:7f:27:5b:8f:3d:ed:fe:2e:b8:7e:8d:48:3f:c7:
e0:98:f9:43:3b:a3:27:f2:4b:a8:6d:39:fc:2d:66:
b0:40:cb:48:3e:4c:47:2b:24:f8:97:54:5d:d8:be:
77:7f:5a:52:5c:42:a1:79:f7:d5:36:a8:37:1f:3e:
f3:89:46:a3:9b:f2:21:49:d3:8e:fb:c2:03:03:25:
bc:c4:7c:5b:97:d2:a9:9d:38:69:35:fc:cc:9f:60:
86:57:94:fc:b9:aa:04:d0:8f:ad:9b:c3:56:79:14:
e6:a4:dd:06:29:07:09:43:36:ff:d7:aa:08:25:ae:
59:40:8f:46:c3:23:4e:f5:ce:10:ad:40:ba:6e:27:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:0F:FC:20:33:02:EC:94:25:AA:66:EE:FF:7F:CF:CD:FF:90:FD
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:2e:d0:5b:d4:9d:9f:a8:f3:79:54:de:3c:c0:68:dd:db:
9d:81:cf:1d:1c:03:ca:3e:73:8a:56:d5:32:d2:61:3f:e9:79:
5a:91:a8:14:e2:92:54:88:d9:c3:53:f0:12:ae:23:12:51:39:
89:5b:fc:f6:97:a7:a4:d3:18:89:7a:fe:7d:e0:9f:8f:33:8d:
91:f6:2d:64:f6:6f:10:52:fc:b3:29:ff:24:d0:60:84:4a:cf:
ad:e0:78:a8:4b:88:8a:1c:ec:89:6a:75:2b:c0:cd:81:25:e8:
62:dd:78:f6:36:f7:0b:9e:34:c3:92:d5:2a:69:5e:ed:c0:71:
00:7b:13:e3:dc:b8:2b:a3:3c:d3:c2:99:39:2f:c7:ac:a2:c3:
5b:8e:98:f9:b0:8b:33:86:05:27:03:7d:95:48:1e:eb:a2:2e:
08:9f:04:0d:0a:eb:54:9c:11:ec:6f:d1:e3:5d:c8:08:c2:f1:
e6:87:37:45:3f:3b:11:56:df:32:5f:0b:5c:d8:48:a9:83:d8:
bf:65:b5:93:97:6a:b5:bf:ea:0b:e6:83:d0:c7:96:32:14:77:
4c:fc:48:15:a0:21:aa:7d:58:44:b1:2d:89:f6:53:f8:fb:00:
66:64:66:96:34:f2:25:70:6a:d7:37:8e:16:60:cc:25:4a:b6:
af:1c:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:34 2025 by rpki-client