Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: eXaVXUOb8BgAA8EslbqEjug/QCDmM4e0C+yXWDSmSto=
Subject key identifier: 9B:9C:92:81:FE:C6:93:F4:A8:7A:5E:1D:02:C3:1D:7A:FE:7B:CE:9F
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 01974A0CC0364C86CEC7CE5532022031C2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 08A3
Signing time: Sat 07 Jun 2025 11:00:38 +0000
Manifest this update: Sat 07 Jun 2025 11:00:38 +0000
Manifest next update: Sun 08 Jun 2025 11:00:38 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: VRXZUKaMjD5SUIpf5VQZ08sB3kMvJikfMNOqrSBi+z4=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c0:36:4c:86:ce:c7:ce:55:32:02:20:31:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jun 7 11:00:38 2025 GMT
Not After : Jun 8 11:00:38 2025 GMT
Subject: CN=9b9c9281fec693f4a87a5e1d02c31d7afe7bce9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:05:82:d8:56:1c:50:28:a8:c2:57:72:b0:
b4:3a:9f:41:70:d1:25:d7:96:4a:8a:61:3a:7b:0c:
fd:81:7e:b6:aa:e2:5b:8a:11:cc:c8:f2:e1:be:a5:
f6:ae:cf:5c:6c:42:b4:31:aa:60:3e:7c:0d:22:05:
1b:e1:8a:0f:0a:85:36:de:5b:36:fc:97:fb:50:35:
ca:b5:8d:c7:97:b5:11:74:91:20:a8:da:c2:de:a8:
62:a9:fc:e1:8a:d7:65:29:6a:62:8f:c8:e7:51:ca:
23:2e:7f:b5:27:d2:de:f5:1e:98:d3:43:9b:0a:bb:
5c:78:f1:45:99:99:62:4c:75:70:22:45:0f:59:cc:
14:31:54:6f:47:22:5f:20:09:86:7b:b1:67:6c:73:
af:12:2c:00:ab:ea:62:4d:fe:40:ac:43:c4:9b:b0:
92:1d:5b:f9:b5:42:bf:0a:9c:4f:89:e2:ef:64:e8:
4f:1c:60:85:0c:9b:49:6e:95:c3:6e:a1:ab:76:38:
21:39:ea:9d:3c:6c:ef:c5:87:82:18:fa:68:65:3e:
e2:e4:a5:83:24:b1:12:8e:0e:f0:db:91:99:81:51:
b6:49:48:9f:2d:19:44:d2:b8:6e:fb:51:51:c3:0d:
cd:28:0c:f7:65:6e:68:05:60:d3:0d:5f:21:d4:d4:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:92:81:FE:C6:93:F4:A8:7A:5E:1D:02:C3:1D:7A:FE:7B:CE:9F
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4e:ae:c6:71:b4:16:f4:06:23:58:88:6f:45:9d:4b:12:8f:
8d:5e:71:09:f9:50:74:1d:5d:62:74:00:55:2c:83:aa:31:d4:
ce:d0:b2:a2:40:0c:5e:d6:83:3b:d9:01:b2:2d:e9:6a:5a:8a:
40:10:e5:d8:f8:d7:ea:0c:b1:f4:00:09:84:e4:ea:ca:fb:26:
77:03:fd:6a:f3:7c:49:60:3a:96:61:8f:ac:1a:bf:a7:13:64:
72:11:89:bb:24:d9:cc:cf:7e:a5:b2:ea:24:f7:ca:c7:b2:e7:
db:42:c6:8d:4a:06:b3:cd:59:f5:de:e1:54:1d:c5:63:d5:c3:
57:47:b5:f2:2a:98:38:1d:67:e9:c7:76:83:bc:bd:f4:77:21:
d4:95:f7:bc:bc:4d:3d:2e:1a:4f:ed:b9:3d:c7:a1:74:73:2f:
34:9e:d8:8b:7d:4d:64:be:ab:ef:a4:f3:9d:61:41:09:60:dc:
94:01:eb:88:72:b7:cb:55:b2:12:e1:a7:b9:14:81:37:40:16:
72:58:44:10:27:f3:12:89:b0:90:a3:e7:f3:d4:c2:02:5e:8a:
f9:6d:95:67:fc:48:d0:a4:f7:84:96:58:e4:24:9e:e3:74:f2:
96:c3:11:3d:96:67:da:f4:a6:0b:e1:17:c1:40:a9:d1:df:ae:
cd:b5:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:16:37 2025 by rpki-client