Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: 44b6sC+BR39zdlxtsYrhallsnlsl2sIOvoorRcaO4qI=
Subject key identifier: 5B:94:00:61:B7:FF:BE:FD:75:5C:13:38:47:2B:0A:24:C4:C6:44:A2
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019745F964A06B5C1A50890277DF39A4D4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 050D
Signing time: Fri 06 Jun 2025 16:01:01 +0000
Manifest this update: Fri 06 Jun 2025 16:01:01 +0000
Manifest next update: Sat 07 Jun 2025 16:01:01 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: V3PKSoflErrB1r3k78Lo4JrLwWauKXOGs9l3diCFETU=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:64:a0:6b:5c:1a:50:89:02:77:df:39:a4:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jun 6 16:01:01 2025 GMT
Not After : Jun 7 16:01:01 2025 GMT
Subject: CN=5b940061b7ffbefd755c1338472b0a24c4c644a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:b4:20:5b:3e:bd:22:c8:6e:3b:4a:15:3d:
0a:d9:3e:86:38:eb:3a:f8:71:37:c6:37:15:b2:2c:
a4:09:bb:cb:5b:e0:aa:fa:89:1a:7a:5c:26:ec:d7:
bb:a6:22:00:ca:38:81:7e:9a:e0:97:04:df:2a:11:
db:62:b4:54:41:f7:b3:bb:27:bc:5c:b7:8c:84:f0:
63:ff:58:cd:16:fb:e3:23:9a:27:dd:09:f4:2c:ac:
50:ef:d4:e5:0f:83:88:bd:6a:3e:a1:b0:c3:60:12:
f3:18:4f:af:ca:19:ba:58:4b:da:59:49:90:ad:ad:
9c:4a:44:14:ea:05:94:1e:b1:70:52:64:68:7c:bc:
e3:de:9b:a9:bb:36:5a:b0:26:a7:18:b2:87:07:17:
46:85:e0:a4:ae:35:b7:37:d1:08:9b:dc:d2:b5:e6:
4a:c2:20:93:ff:3b:ef:65:72:79:aa:d7:52:dd:c1:
94:3a:4a:6a:3e:1b:bc:f5:d0:e9:c7:a5:12:5b:cb:
4b:7e:43:c7:ce:97:dd:dd:13:b1:0d:14:1d:3b:c3:
4e:e0:7a:42:ed:14:ba:f7:c7:6a:5c:ed:b5:a6:a4:
b8:47:7c:f8:48:f4:07:f6:03:85:05:f6:e7:6c:7f:
72:b2:73:4f:38:7e:6b:d3:45:b2:52:2f:f2:4f:ce:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:00:61:B7:FF:BE:FD:75:5C:13:38:47:2B:0A:24:C4:C6:44:A2
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ec:33:76:ad:43:6e:6c:29:44:22:7d:d3:a5:38:b6:31:e3:
6f:85:13:c5:16:96:8e:32:fb:29:0d:34:5c:0b:36:97:95:94:
71:d7:97:fe:0d:cf:d4:d2:48:75:cb:f6:90:a4:91:82:f5:b5:
f9:20:c2:f1:12:6d:a6:62:57:5a:69:40:2d:dd:98:6f:6e:c1:
a0:57:bc:c2:4f:14:e8:0f:15:15:34:31:f8:12:f0:02:cb:4a:
d0:40:c0:e0:a5:6a:ca:54:ae:bd:ad:41:c1:12:83:41:9b:37:
36:7a:b5:1e:1f:e6:66:3c:18:9c:a9:7f:e4:dd:76:3e:91:67:
1a:1c:58:a2:ea:ea:60:19:55:64:95:cc:9b:dd:51:04:d4:84:
5f:40:ef:cc:8b:15:1a:32:f4:ec:6e:29:76:c4:df:5f:7c:09:
8e:51:83:ac:2e:38:33:5e:12:f2:fa:f9:4e:2c:3b:90:d7:1e:
80:45:14:e3:cc:72:4f:86:e2:6e:d3:75:96:02:ca:ff:eb:30:
06:49:bc:19:f1:72:56:42:8f:c2:d7:cf:dc:b8:4d:f6:c6:8e:
bf:f1:5f:da:78:ee:ab:99:4f:8a:1e:c2:90:ce:c1:f4:39:10:
3b:86:7a:3e:05:32:82:b0:0b:96:13:4f:07:7e:f5:24:fe:24:
42:1b:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:17 2025 by rpki-client