Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: MZPz7C47tFjkooqO/6KolIgfSxuGaFDupX7ErRD5okg=
Subject key identifier: 67:F7:6C:19:41:1D:B2:08:FC:AE:E6:FF:1C:0F:30:8C:4F:0D:EA:E1
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019745C21739D10975240BA6F94A328E5D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1583
Signing time: Fri 06 Jun 2025 15:00:37 +0000
Manifest this update: Fri 06 Jun 2025 15:00:37 +0000
Manifest next update: Sat 07 Jun 2025 15:00:37 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: a16xQeCxL1qBw2eyGnbKeFJ0YRk3VOhCUKkdWYUROME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:17:39:d1:09:75:24:0b:a6:f9:4a:32:8e:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jun 6 15:00:37 2025 GMT
Not After : Jun 7 15:00:37 2025 GMT
Subject: CN=67f76c19411db208fcaee6ff1c0f308c4f0deae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:49:ce:bd:1c:63:31:73:e1:40:f4:ea:4a:
d0:70:be:39:c3:1e:ba:6d:44:7b:85:59:3b:fd:19:
f3:84:f2:46:40:10:c0:fc:a3:f0:6f:6d:02:a6:f5:
a5:ef:b4:13:d8:b4:bf:70:e1:2b:61:e4:2a:a2:1d:
72:d8:bc:de:78:e1:69:e4:78:d3:a6:6f:b6:61:b2:
8f:a8:99:10:19:15:d2:e3:df:63:d8:91:c3:72:bc:
e8:14:19:22:35:e0:59:0a:b3:a7:21:21:7f:af:78:
4e:d0:ee:05:16:49:45:f0:44:9c:e9:f5:d8:f0:d6:
dd:58:bd:54:bc:05:5b:4e:26:6c:e5:9f:81:9c:3b:
f3:aa:8a:7e:79:6e:36:e6:1f:34:c5:ad:76:f4:43:
17:48:c7:5c:d1:b9:64:ff:10:c5:36:b3:c7:24:25:
5e:47:a3:73:9b:92:aa:1a:3a:5f:08:3b:eb:a7:13:
44:db:05:ac:55:fa:06:37:d2:9f:03:ad:f9:fc:6f:
cb:c5:8d:ee:db:b3:77:7a:0b:1a:83:77:7c:52:74:
1d:d2:5c:26:81:fd:17:c9:fb:0d:9a:9e:a1:54:04:
3e:87:6a:38:2b:32:ea:08:a2:13:47:e4:86:79:0c:
23:60:7b:69:75:4e:76:4d:d4:8c:fa:93:28:88:54:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F7:6C:19:41:1D:B2:08:FC:AE:E6:FF:1C:0F:30:8C:4F:0D:EA:E1
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:fd:fd:97:33:e6:cf:9f:3e:7b:93:b4:0e:3f:b5:14:74:
5d:45:36:30:0c:67:da:f4:f4:1a:4c:49:6c:ca:35:c6:4f:68:
52:b9:92:91:44:5d:3c:54:82:94:80:a9:65:2d:03:00:01:1d:
0f:3d:e1:3f:34:9e:62:49:c2:29:76:e3:20:9f:ca:a0:44:0a:
82:cf:24:fa:52:53:9e:bd:c6:43:4d:31:83:b4:b1:a7:c1:d5:
9c:fb:36:2d:f9:6f:2a:e1:b2:98:ee:44:a2:b8:5f:54:0a:53:
e3:2b:4a:fe:95:ce:61:3e:07:1b:8e:e3:a5:65:83:2a:4e:67:
8b:20:f1:bf:4e:db:07:35:4e:9a:60:ed:97:97:87:f2:fa:07:
9c:2d:6a:87:7c:4e:71:bd:4b:a0:57:0f:2a:f6:2e:5b:8d:11:
92:33:d4:40:30:c9:09:b6:5a:11:81:2e:45:00:f9:cc:cc:ea:
79:c7:69:94:52:bc:90:5c:c7:c7:cd:87:1e:78:1e:ff:6f:f5:
a7:5a:f4:7a:b7:e3:57:e5:ff:59:83:bf:16:b8:48:fb:d3:6e:
42:92:34:43:56:be:62:97:48:38:12:dd:a3:c3:b3:a6:9d:33:
39:f6:c0:8f:5c:5b:d9:bf:e8:de:14:8a:71:6a:a5:99:b2:d7:
82:4d:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:38 2025 by rpki-client