Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: QLfTpe2IetB/KdsgiUVBSlSAo0wry0CBJTdFBk89b/Y=
Subject key identifier: B2:59:F2:7C:A4:4B:A6:1F:04:70:06:2F:0B:B6:5E:B7:D6:13:B9:A1
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 01974A7A9B0EDFC0E748F1EFBD8CC2E76DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0C11
Signing time: Sat 07 Jun 2025 13:00:38 +0000
Manifest this update: Sat 07 Jun 2025 13:00:38 +0000
Manifest next update: Sun 08 Jun 2025 13:00:38 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: hxdnhTv3KhNPNnb4Q3d5FOLy06u/i7ygEN8wa57fhu0=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:9b:0e:df:c0:e7:48:f1:ef:bd:8c:c2:e7:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jun 7 13:00:38 2025 GMT
Not After : Jun 8 13:00:38 2025 GMT
Subject: CN=b259f27ca44ba61f0470062f0bb65eb7d613b9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:23:32:28:c9:6d:db:ef:84:4a:90:c6:09:
f4:15:00:87:f3:e2:65:68:60:88:fa:44:f0:0f:1e:
bf:a5:df:15:63:04:8d:22:b4:ad:e8:0d:68:9f:49:
e0:71:b1:bc:87:56:d1:19:0f:e1:b5:d0:6b:2e:9c:
28:77:da:13:4e:73:8f:c8:27:59:c5:05:a7:f5:a0:
15:6b:0c:7d:9f:fa:5e:c6:a6:05:f0:3a:b5:04:09:
11:df:4d:5e:a7:7c:d1:99:a3:09:80:74:7c:d6:d5:
f5:34:9b:96:3e:f1:b5:75:25:af:a3:19:d4:14:4f:
8b:ba:0e:0a:53:f9:74:fd:b0:2d:e9:03:7b:05:cb:
61:0d:bc:44:03:1b:96:89:36:7e:87:f1:1d:38:7b:
2c:fd:66:0f:d4:9c:79:a4:a2:ff:56:3d:c8:1e:89:
da:5c:86:17:9e:b3:53:f6:3c:51:a2:0e:2d:5b:f2:
e0:62:3e:2c:f7:f4:82:ec:ac:7c:f2:1c:cf:a6:e6:
91:b3:df:1e:bd:9a:3c:9a:32:b0:da:95:07:d7:66:
11:b3:41:e0:ef:19:1d:44:d0:cf:de:c7:70:68:81:
3a:97:ab:df:bf:99:fc:7c:65:4a:fc:0e:be:59:60:
fc:f2:17:2c:35:fb:d7:3b:a8:1a:a2:27:4b:8a:39:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:F2:7C:A4:4B:A6:1F:04:70:06:2F:0B:B6:5E:B7:D6:13:B9:A1
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bc:4d:89:9f:15:f4:8c:5e:94:37:bf:e2:85:e2:64:30:b6:
a9:78:a0:03:5d:b0:55:8f:59:f5:52:e0:72:67:3d:f5:cf:23:
5a:f9:73:82:b2:9a:35:ba:22:07:02:5d:c5:db:04:cd:05:e3:
24:52:8b:bc:6d:0f:47:7f:b7:f5:40:8f:11:a3:2d:6d:7a:6c:
5e:a3:d0:c0:4f:a2:60:9a:4a:25:7f:9c:6b:73:4c:46:9a:02:
03:22:b1:23:34:d6:9f:e7:9f:0e:58:e9:78:00:1b:91:60:70:
87:45:76:20:62:6f:48:5b:da:7a:63:d8:e4:23:dd:0f:8d:c5:
8b:6b:82:93:a4:96:66:b7:53:ab:f8:07:9c:5d:b3:71:83:f0:
72:47:a0:84:d4:17:40:be:77:fb:9f:d2:82:27:0c:b4:e4:09:
d4:0d:8a:97:9c:b8:89:a0:28:2e:f8:3c:6d:9e:e4:4f:82:47:
79:49:63:90:ce:64:ae:09:47:49:08:98:5e:d4:ba:6a:43:91:
fa:2d:f2:b4:52:11:d5:1a:ee:9b:a0:03:b0:12:27:22:4f:ff:
b0:4e:cc:51:d7:5a:cf:5d:a3:0a:68:03:fe:d8:47:e0:f9:c9:
d4:f7:31:e6:a9:3a:3e:1d:e0:65:b7:27:96:05:36:27:e3:0b:
28:0d:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:58:39 2025 by rpki-client