Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: vtUMQqkbZ7+4/ECGZ+BkZQGt865olE49Vaee0d7i5xU=
Subject key identifier: 3F:37:9D:CB:5F:7F:00:CE:E2:09:0B:9F:2A:6D:1A:2A:9D:E9:84:59
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019745C268C8AFAF39FB1527D5ADD6FC4098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 15:00:58 +0000
Manifest this update: Fri 06 Jun 2025 15:00:58 +0000
Manifest next update: Sat 07 Jun 2025 15:00:58 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: j1SqH1TbzC0hAO6Ojo7YdncOJ7aQTvI34wTOM1y/kb4=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:68:c8:af:af:39:fb:15:27:d5:ad:d6:fc:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Jun 6 15:00:58 2025 GMT
Not After : Jun 7 15:00:58 2025 GMT
Subject: CN=3f379dcb5f7f00cee2090b9f2a6d1a2a9de98459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:7a:8c:e6:62:c7:c5:ee:bb:c0:4d:cc:31:
98:9e:48:69:24:cb:19:25:93:f1:59:36:c2:6d:b7:
37:e1:57:4f:6a:87:ca:34:54:16:2d:4c:c5:7d:c1:
15:de:19:58:9a:c1:ce:30:be:e7:73:75:d4:ce:8e:
75:d6:f1:99:8c:41:dd:e8:77:19:39:80:e2:7a:92:
0b:97:09:7e:46:7f:0f:24:e5:19:30:5d:ff:2d:c1:
a8:d2:f1:c3:05:79:15:58:22:e5:83:45:8f:9d:63:
46:09:4c:cb:03:d1:73:2b:58:a9:1c:63:36:0e:e2:
e5:93:eb:f4:16:77:78:53:a7:c2:d2:ea:ea:cc:dd:
3f:06:59:4f:f0:09:a0:63:a4:2f:a5:8f:80:4e:bd:
3c:9b:3c:c6:3b:a6:f2:cd:79:42:7e:77:23:cb:39:
7b:30:c8:1d:28:8a:d4:9a:b7:02:a8:90:72:cc:55:
82:6e:a6:47:7f:a5:23:f4:52:e9:47:3e:5a:07:c3:
95:5c:c1:65:22:76:ea:82:04:ab:b7:20:88:83:8f:
7f:66:01:f8:47:da:05:0b:51:9e:69:76:db:2c:72:
da:12:f2:bf:bc:a7:c0:f1:db:dc:40:b7:79:70:43:
39:75:59:a8:5d:58:d2:91:99:27:07:19:4a:ed:e3:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:9D:CB:5F:7F:00:CE:E2:09:0B:9F:2A:6D:1A:2A:9D:E9:84:59
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d9:35:d6:f4:08:11:50:21:0f:51:88:e5:0f:3a:e7:3b:49:
1e:46:65:f4:f5:dd:21:0c:fe:e0:31:87:6b:3c:b6:53:0b:cb:
72:bb:cb:77:b4:9c:ab:fd:f0:4a:5e:f6:6e:49:31:12:1e:80:
db:b3:0b:ce:03:de:46:44:21:88:bf:4c:18:3b:0c:dd:7c:fd:
a5:cc:3a:c4:fd:44:93:16:f9:18:7f:2d:1a:cc:f1:e2:58:19:
8d:30:01:c9:5b:14:11:6e:17:ee:9c:fb:2d:1b:3c:19:8d:7c:
ba:7b:bc:94:82:76:0d:fc:bc:ea:eb:b8:51:6e:7e:04:8c:2d:
2f:6b:c0:ea:12:0d:bf:d2:d3:77:1c:eb:4f:8f:bb:ed:9e:1c:
7f:a4:2e:88:02:25:eb:b5:59:59:bf:0f:79:14:a5:23:0b:83:
c6:6b:b5:c2:11:45:6b:1b:eb:bb:02:5a:43:72:13:15:c3:4c:
b3:09:61:35:38:00:cf:4b:a3:03:ac:b8:a5:0e:57:ea:46:c2:
d0:e7:16:f9:ff:72:9e:a5:86:5a:79:93:70:fa:04:cc:a1:81:
a0:dd:11:56:ad:75:00:c6:3f:b0:ea:18:6d:25:a7:d7:c9:3a:
7c:89:f7:96:31:82:2b:00:27:01:53:a7:5a:d5:24:de:43:70:
2b:ca:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:39 2025 by rpki-client