Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: jLrMRYpvSe7o+f9nX3rfXJ/YH02YwzfoEnnp2vOKvH8=
Subject key identifier: 9E:2B:04:DE:1D:A7:D4:4B:A7:C0:32:FA:D5:B0:38:8B:91:5D:48:5D
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 019745540F15A3C6F97352CAF57266BCAA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 1144
Signing time: Fri 06 Jun 2025 13:00:26 +0000
Manifest this update: Fri 06 Jun 2025 13:00:26 +0000
Manifest next update: Sat 07 Jun 2025 13:00:26 +0000
Files and hashes: 1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: XGBwPUyIE6tLywEUT6e7thVL1RA8DprG5Kre/X0ZdGE=)
2: I5wQnrgvMCaYn9C8yDvoLQWI0Fs.roa (hash: LLp7jSaPRxKkmfQPCgmC3oWPlWcodXukIf+OL2Y6Xy4=)
3: h62oWk5e6sS8zDCwC47t23u4hGk.roa (hash: KIOG5EX7T8Dsm3c4MU4hyZU5pek+PylPfC7rdsiyJoY=)
4: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (hash: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:54:0f:15:a3:c6:f9:73:52:ca:f5:72:66:bc:aa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jun 6 13:00:26 2025 GMT
Not After : Jun 7 13:00:26 2025 GMT
Subject: CN=9e2b04de1da7d44ba7c032fad5b0388b915d485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:5d:8c:7e:45:a4:77:8d:b0:94:ba:21:b8:
30:44:c0:c7:9c:54:be:6f:b8:ee:a1:dc:8a:ef:72:
4f:f5:d1:4c:0a:1c:e4:0e:c4:12:bf:a5:9c:22:9b:
f0:78:d0:ca:6a:c5:d9:56:90:1d:5f:10:0a:e8:06:
87:92:2f:bd:17:fd:59:98:2a:c5:2a:0e:c8:bd:67:
bb:7d:7e:3a:ca:66:96:67:cf:fa:df:bf:60:0a:7b:
49:46:a1:7f:22:7f:c3:d7:6a:bd:c1:69:f7:b7:75:
f9:4a:77:60:c0:42:72:d3:b9:ff:6e:94:da:cb:15:
cc:b3:4f:05:ae:2a:e2:ad:1f:46:a1:6c:70:f3:b2:
08:1b:bf:b3:50:c1:54:38:25:1a:3a:4b:6a:47:52:
b7:13:59:a1:03:b3:59:39:a1:56:1b:03:59:9d:36:
d5:1e:de:14:8a:a9:a4:cb:83:ef:59:e9:ed:64:aa:
fa:3c:58:40:87:ea:81:1b:50:d5:75:df:dd:b1:73:
1d:93:65:6d:d8:b3:4d:39:a6:78:62:86:68:86:92:
b3:4d:45:08:5b:53:86:c5:b7:36:71:ca:42:fa:89:
0f:8b:be:b6:d9:02:d1:d8:dd:62:44:12:ec:25:a9:
99:f2:56:77:39:50:14:13:86:c2:8c:8b:f8:9d:7f:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2B:04:DE:1D:A7:D4:4B:A7:C0:32:FA:D5:B0:38:8B:91:5D:48:5D
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:93:a8:31:e4:65:79:8f:8f:0f:3d:e4:39:1b:19:16:62:
ee:85:0d:47:be:37:08:f8:33:30:e0:62:e2:e6:07:15:1c:c0:
0b:6a:fd:35:47:da:ce:c5:93:da:04:26:ce:e2:79:ad:f2:63:
ed:2d:a4:5b:3f:da:4d:49:24:20:06:38:1d:ab:31:58:5e:3a:
90:75:42:cc:65:f0:6f:1b:db:57:a4:a8:6f:54:5d:8f:fc:20:
2a:82:fc:b9:00:ee:3f:24:e4:df:e0:fd:1c:76:0a:33:da:cc:
90:56:4a:00:eb:3a:ba:f7:1e:5c:8d:e5:ae:6f:39:bc:d5:ed:
e1:2b:ab:22:84:46:56:9e:66:68:49:bd:0b:f7:8a:06:7b:d5:
0a:db:21:95:bf:ea:5f:4f:dc:69:bc:5a:60:24:ed:b8:53:42:
4c:3c:33:ec:fc:4c:53:70:98:96:44:e1:bf:c7:2e:84:0c:9a:
ae:75:fd:91:bc:9d:d1:f3:0f:2f:67:c9:2e:2f:a9:56:6e:dd:
00:af:1e:ce:45:a7:fa:25:09:1c:55:51:9b:0e:b7:98:b2:10:
a5:5b:51:97:5b:57:81:73:95:db:ea:ab:4b:90:64:4a:b3:55:
f7:f0:c8:17:55:24:5c:d5:9b:05:45:84:cf:a3:fd:e4:10:a0:
6e:e6:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:08:31 2025 by rpki-client