
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: 1iyvCL3z5JhG3ypn3f9ZHkqYZElRO8+McWFiE/B29dM=
Subject key identifier: D3:AD:64:72:93:D3:AD:C3:FA:B8:1E:7F:DF:D6:A3:A8:A8:CC:C5:9F
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 01974C32548B7FB8DCC7B07225311C8A36FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 098A
Signing time: Sat 07 Jun 2025 21:00:56 +0000
Manifest this update: Sat 07 Jun 2025 21:00:56 +0000
Manifest next update: Sun 08 Jun 2025 21:00:56 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: n9osOWTYA7ftesuzQmh3wvaLYJjKsYl9Clh8UYQlHyk=)
2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:54:8b:7f:b8:dc:c7:b0:72:25:31:1c:8a:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Jun 7 21:00:56 2025 GMT
Not After : Jun 8 21:00:56 2025 GMT
Subject: CN=d3ad647293d3adc3fab81e7fdfd6a3a8a8ccc59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:8e:21:1d:2f:70:75:09:34:6c:dd:12:42:
24:d6:4c:52:06:bb:55:2e:7c:bc:a0:8f:c8:a9:2e:
eb:65:b4:ee:1d:b5:ac:41:9f:48:90:77:4e:67:35:
43:17:a5:07:e4:6f:69:4c:66:a4:67:8f:7b:86:3b:
6d:b9:4d:c3:67:3f:2e:11:ef:44:3f:a8:35:e7:63:
58:24:c1:fc:92:5d:51:7d:0c:4c:89:0e:b4:1e:fe:
22:1b:d7:8c:13:20:f7:ee:f6:6a:04:b3:1f:5a:12:
db:ab:d6:41:76:4b:c3:e2:70:2b:64:3c:fc:db:29:
b9:4b:01:cf:f3:c9:f8:12:f3:46:3c:c5:d0:e2:14:
9a:ca:97:6b:3c:9c:0b:fb:be:54:a8:44:4f:82:2b:
b0:68:6a:78:f3:83:d4:25:d9:21:04:21:1d:c8:03:
06:e4:97:d0:53:89:d3:0f:28:32:85:a9:bd:8f:35:
58:e9:cb:c9:08:b5:65:50:e3:d1:87:3b:49:a0:30:
ab:d6:37:f3:55:90:d5:12:21:39:04:96:87:25:b2:
18:34:12:73:88:fa:b6:d6:d6:27:71:b9:99:1d:e7:
05:44:8a:2b:2c:62:df:20:1b:96:aa:b2:5b:69:56:
a6:76:ec:1f:4d:c8:01:5d:f1:bf:e7:5a:ed:cc:2e:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AD:64:72:93:D3:AD:C3:FA:B8:1E:7F:DF:D6:A3:A8:A8:CC:C5:9F
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:56:10:70:3a:18:12:5c:3b:1a:06:99:70:fa:a9:4f:88:
e7:ef:4c:58:be:8b:90:ac:57:3a:69:df:fc:3b:6f:38:3c:73:
43:66:66:a7:0a:81:ac:9d:12:10:e1:3c:27:b8:2c:e2:56:1d:
9c:7e:57:58:56:44:fb:3b:d4:d0:d2:d7:e3:8c:42:ff:a2:74:
48:4f:b2:fb:c8:60:f0:14:36:2a:57:54:16:48:9d:e4:03:60:
60:ba:eb:4d:bd:54:0e:59:ba:60:6f:81:b6:ef:b2:d2:86:8c:
0b:8e:43:3b:0d:3a:e9:cd:52:02:51:44:c7:f1:e1:e7:72:3f:
f4:02:cf:ef:10:86:d9:b1:96:f2:9f:e4:4d:73:98:38:53:a4:
69:43:25:95:03:6e:15:cb:d0:b3:f3:81:b8:b2:f6:1d:25:1b:
af:e8:e5:bc:cd:77:20:42:a3:d1:09:54:7b:85:23:9a:58:3f:
86:69:ce:b8:dd:a7:4b:99:3d:68:2a:14:36:d1:ac:03:6a:35:
1b:4e:f2:3f:1a:3f:09:db:7c:d4:0f:6a:a5:3d:90:2b:34:5d:
3b:df:13:b8:2e:6a:5d:b6:03:d2:05:52:59:8f:b2:5b:b4:b9:
90:a4:51:ac:aa:e0:29:ca:a0:a5:0f:6f:3d:07:1c:c2:76:26:
28:ef:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:48 2025 by rpki-client