Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: dY+uk0NIQjPelhAAAStqrGgwQCDCr2XqIrCzoCtWtNU=
Subject key identifier: 72:1F:63:BA:B9:CD:BC:0F:D5:65:B3:FD:41:4E:B1:9B:E5:50:CD:CF
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 01974AB13DDD7597F6A6D6C39F23813761E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 0359
Signing time: Sat 07 Jun 2025 14:00:18 +0000
Manifest this update: Sat 07 Jun 2025 14:00:18 +0000
Manifest next update: Sun 08 Jun 2025 14:00:18 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: 6wIAfzoyLXVu11SLl03DXDNvCMc/DlKYoq6y3LCZpUI=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:3d:dd:75:97:f6:a6:d6:c3:9f:23:81:37:61:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Jun 7 14:00:18 2025 GMT
Not After : Jun 8 14:00:18 2025 GMT
Subject: CN=721f63bab9cdbc0fd565b3fd414eb19be550cdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:a9:ed:69:40:72:57:8c:95:0d:3b:c7:6d:
0a:b2:4b:ca:93:22:f2:99:03:a9:27:92:43:c6:06:
6d:e0:dd:79:91:ce:54:13:10:a7:56:9e:f8:6d:63:
41:03:79:23:b1:a3:38:31:89:97:9a:c7:1c:c3:0c:
e0:0d:b1:9e:c4:2b:a5:de:8d:51:c4:54:ba:1a:05:
8b:fb:f2:13:c1:b5:8b:19:9a:2d:dd:40:c7:1f:c9:
3f:01:a7:34:82:2c:5d:7c:19:2c:69:92:9e:00:15:
94:8f:39:c2:d0:77:35:2a:a3:d6:fa:b2:63:09:0b:
67:93:7a:17:cf:ce:5e:33:38:9a:ce:39:b8:18:32:
5f:46:e1:84:a9:c5:c7:7d:d0:d6:de:e8:5d:70:18:
67:8d:c4:ae:c0:2a:87:18:fe:6f:7e:9d:1b:16:e3:
18:e9:af:e8:72:d8:89:bb:f5:45:57:3c:7e:5d:24:
cf:71:0b:9c:53:10:15:1a:11:5b:1f:f7:b6:5c:33:
e8:d3:22:1c:64:5b:d1:22:8d:db:5a:db:99:74:04:
ec:ed:07:1e:97:1d:29:fd:46:e6:a4:55:4a:e1:58:
33:37:40:59:d6:2e:55:7b:3f:b2:64:50:c0:61:50:
3d:78:7a:2a:a4:a1:1c:29:8e:90:10:54:e2:90:a6:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1F:63:BA:B9:CD:BC:0F:D5:65:B3:FD:41:4E:B1:9B:E5:50:CD:CF
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:86:44:69:56:fe:bb:53:c8:eb:59:4d:af:05:83:e8:37:
b6:87:ae:67:e2:d1:bc:7e:85:c1:aa:dd:c0:db:ea:ec:08:ec:
34:8f:36:dc:63:8b:96:46:cf:3d:0f:4c:cf:3d:46:e9:28:10:
1a:0b:65:0c:fc:59:43:4b:bb:a1:b1:c2:6d:c0:b9:39:8b:e8:
7c:3e:33:96:47:7f:f0:da:f7:a5:99:a1:0c:25:db:0d:17:02:
ef:90:b2:3d:ff:90:7c:7c:c1:21:15:84:2b:85:1f:08:48:1c:
97:88:3d:b9:2e:fd:97:6f:b5:b0:5f:0c:30:50:eb:d4:9d:18:
a7:64:42:53:6a:27:52:6d:b9:b5:d8:10:7f:e3:4a:8c:e8:32:
26:30:da:c4:45:c8:24:53:6f:85:18:fc:aa:73:4d:2f:6b:ce:
e4:b7:12:03:c5:d0:83:b7:42:f3:0e:50:40:c1:d5:1e:a4:1a:
a1:72:5c:e5:26:8e:db:26:8c:4c:6f:03:05:7c:db:54:74:3d:
b6:5a:44:ed:13:ce:de:93:2a:cd:84:b4:29:e7:98:83:27:a1:
8f:8e:68:94:d9:33:b4:d7:c0:d4:86:fd:36:10:58:d6:0e:3f:
a2:97:b6:af:2a:cf:c7:3f:f3:b1:8f:59:fe:2e:2a:1c:2a:47:
d0:ff:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:34 2025 by rpki-client