Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: Q/Zs6mRxsF7cTY76ZjZsV7mP2TowHwOPt0P17+AQMs4=
Subject key identifier: 16:57:2C:31:29:C6:65:F4:2F:2A:96:89:23:ED:4B:EA:7F:A6:4D:86
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019748C320982F44F0C6C74DE78BD8958FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 089A
Signing time: Sat 07 Jun 2025 05:00:36 +0000
Manifest this update: Sat 07 Jun 2025 05:00:36 +0000
Manifest next update: Sun 08 Jun 2025 05:00:36 +0000
Files and hashes: 1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: NHoQAhRd5PozP65J5fLFwugYRKmVNcMWBu5aLWAw9oE=)
2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:20:98:2f:44:f0:c6:c7:4d:e7:8b:d8:95:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Jun 7 05:00:36 2025 GMT
Not After : Jun 8 05:00:36 2025 GMT
Subject: CN=16572c3129c665f42f2a968923ed4bea7fa64d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:20:bb:a7:1b:ce:96:2a:e0:e2:72:cc:d1:
bd:28:dc:7a:ec:40:ce:56:5a:9b:40:8b:28:f2:a8:
07:22:6e:7b:fe:9b:49:51:c7:95:9b:3f:47:03:60:
63:75:7b:2c:09:95:b8:b2:a1:55:56:1b:a5:40:b4:
33:d8:62:54:86:fe:0e:7f:e1:82:34:9c:7e:2f:5e:
9f:c3:a5:f8:77:50:52:79:27:8b:51:39:69:db:79:
5e:a7:f6:32:bb:7b:21:12:19:b4:a8:b4:b8:1c:7a:
f7:4a:ba:ae:7b:b8:fc:f0:ef:d1:ed:29:65:30:0d:
1c:c7:d3:93:83:28:20:35:4b:a9:1e:99:d3:04:a1:
2b:82:9d:59:b1:58:63:7a:ce:6b:c7:ff:60:2b:23:
3a:9e:8a:2c:37:43:7c:de:02:74:73:6b:20:58:16:
8f:72:19:72:2b:a3:7d:ca:95:21:af:52:91:c0:f9:
85:cf:02:b8:64:5f:4f:52:df:c6:1b:d5:c0:29:42:
3f:ed:01:24:9d:b7:19:f8:6a:98:3a:59:98:1b:0f:
53:e3:39:0e:1d:15:39:fd:72:e9:25:72:21:a6:fc:
bc:74:a8:c5:2a:e1:49:2b:fb:8b:3f:4b:99:14:09:
ed:10:fc:8e:37:d6:04:06:1c:3e:59:ae:c3:fc:64:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:2C:31:29:C6:65:F4:2F:2A:96:89:23:ED:4B:EA:7F:A6:4D:86
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:da:02:52:03:6a:fa:8c:1a:bd:da:23:b4:3a:74:f3:60:6e:
91:47:97:3e:f7:5a:9a:a6:b4:a9:78:a9:d7:96:ae:3a:54:32:
81:da:26:b6:2d:50:ed:4c:a5:fb:23:0b:1c:b6:5e:69:ec:b8:
47:e2:f3:d6:1f:03:3f:4e:64:ac:44:85:64:04:37:c0:91:97:
ce:52:41:49:07:76:0f:47:4f:b0:28:52:f9:6b:74:1f:27:7c:
2c:49:e4:24:6c:d3:ff:10:3a:f5:24:be:05:58:c6:7b:71:f2:
35:18:0e:e3:00:3f:47:30:db:57:94:71:54:26:d9:6f:60:43:
8f:58:66:1e:08:3c:85:49:3f:9f:c1:71:d1:d8:e5:26:f9:93:
71:77:ae:73:e7:48:09:72:d1:ae:ca:f7:ce:ee:b6:22:c4:03:
e8:18:a2:ea:9e:88:27:41:86:23:93:62:95:2b:96:55:80:1f:
59:7e:03:a0:56:2f:93:2e:f8:6f:db:d4:11:f9:de:50:f9:b2:
56:51:6e:6d:45:cb:62:a7:46:5d:d7:9b:4a:6b:eb:79:64:82:
59:53:ac:4b:13:38:38:ca:8b:3b:5c:22:9a:67:9c:b1:27:ab:
ba:b1:d6:03:8a:09:e6:5f:35:5e:17:71:b4:b4:0d:05:fe:a2:
1b:cc:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:30 2025 by rpki-client