Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier: 34DW/VUjAqQG/qwvoUBr+PJFBO7Y5HQv8Q79xEelvFU=
Subject key identifier: 2E:DB:05:8A:4B:B5:40:7E:E8:EF:32:FA:19:49:09:AE:92:50:C4:E2
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 019745C29CBA80A1EBD4D5FB13FAE65157FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number: 3F
Signing time: Fri 06 Jun 2025 15:01:11 +0000
Manifest this update: Fri 06 Jun 2025 15:01:11 +0000
Manifest next update: Sat 07 Jun 2025 15:01:11 +0000
Files and hashes: 1: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: 74/N6Prq5jV3i53UlHuXodIR/sWlaelTWMoLaSc8gn8=)
2: _R2-unRLTVoARNA84wK9QwIRcHg.roa (hash: pLbQbiX22eVdy+zNJ3CqYse/kH4/484+cWZJ4cChULA=)
3: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:9c:ba:80:a1:eb:d4:d5:fb:13:fa:e6:51:57:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: Jun 6 15:01:11 2025 GMT
Not After : Jun 7 15:01:11 2025 GMT
Subject: CN=2edb058a4bb5407ee8ef32fa194909ae9250c4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:5d:ef:ad:49:b9:45:d0:67:f4:09:3a:d0:
3c:fd:53:8d:d4:ba:e4:1a:9a:27:71:3f:b0:8a:bf:
e2:5f:43:76:15:ec:38:5e:44:eb:1a:cd:5e:9e:e2:
16:ec:74:91:18:83:0b:42:72:e3:ce:73:ee:c8:96:
62:30:15:9b:a4:73:13:1d:bb:70:3a:5c:80:fc:1e:
24:c0:dd:55:f1:01:1b:3c:06:f3:0f:0f:1c:5d:7e:
e7:b1:29:c2:34:78:85:95:ed:f6:c7:36:b0:1f:61:
92:d0:09:3f:c7:99:24:e9:69:b4:56:7a:f7:50:7b:
09:70:f1:89:a7:60:a1:8d:71:87:ac:40:4b:20:fa:
01:08:c0:d2:eb:66:9e:f0:6f:73:68:af:d7:31:4f:
ce:96:86:2e:d6:d0:27:4d:8f:6b:88:93:74:ca:7e:
59:69:59:21:6b:04:f1:6d:af:8b:6b:a5:b4:50:c3:
83:63:c5:fc:e8:a3:53:4f:bd:95:18:08:d5:71:14:
1f:d0:05:0e:26:9f:a0:99:10:3e:e8:70:cd:07:8e:
54:0e:5c:4b:e2:15:c1:16:ce:07:0d:83:40:5a:de:
de:7f:fe:72:c4:82:17:0d:72:72:cd:0a:b5:53:15:
f9:19:2a:9e:32:00:72:a9:f9:3b:18:1d:8c:d2:88:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:05:8A:4B:B5:40:7E:E8:EF:32:FA:19:49:09:AE:92:50:C4:E2
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3d:7d:a1:c0:8d:82:49:72:d9:33:59:7a:cf:15:dc:07:5d:
c0:eb:db:7c:59:5f:06:b5:91:8a:9a:db:0c:a8:d2:2d:fb:16:
94:76:bb:ef:b9:84:b5:e9:77:2e:c2:1d:08:21:37:56:66:97:
fd:2b:53:01:4a:08:36:a1:7d:48:14:ba:8a:d0:e3:be:0e:a2:
7f:0f:44:72:54:19:c4:39:ef:a6:2b:45:d8:8e:0e:05:6b:67:
b2:18:67:39:dd:7d:b6:32:c6:ec:29:9f:fe:1f:e5:ff:d7:fe:
b2:c3:2a:63:48:a0:c7:ad:1e:ab:0d:43:f5:9a:ab:fd:7e:6a:
62:7e:ad:0f:3a:8e:84:35:eb:79:ed:7e:da:32:29:6f:f0:c9:
fd:d5:78:3f:69:95:9e:60:4e:a1:b3:42:74:44:1a:e1:87:39:
8b:94:42:9a:37:6a:6f:08:d2:b7:ea:87:99:80:b6:6e:04:c3:
b1:a6:2c:ef:70:74:c5:d1:fc:f1:10:ad:b7:06:cc:9a:1b:8f:
dd:77:30:30:63:de:fe:28:c8:82:31:44:97:74:aa:15:12:be:
76:bc:4e:22:68:0c:bb:12:16:62:2a:8c:b2:f7:49:ae:fc:0e:
73:60:e4:b8:60:d8:7e:9e:98:e4:a6:fd:5d:38:75:6d:66:a9:
37:69:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:46 2025 by rpki-client