Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: gdmwti627E31cYsBspHWxsnhaH3ctKXkJc51DkICaK4=
Subject key identifier: C8:29:10:22:14:7F:DF:EB:81:43:52:C2:B4:9E:4A:79:30:7F:4C:D3
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 01974779DE2A5A955A3C85446B2EAFACC296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0EBE
Signing time: Fri 06 Jun 2025 23:00:58 +0000
Manifest this update: Fri 06 Jun 2025 23:00:58 +0000
Manifest next update: Sat 07 Jun 2025 23:00:58 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: Bd7PAa5EXDK8HzgAXyaxJq+WdF6Pr4ie/Vy1fu3n20Y=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:de:2a:5a:95:5a:3c:85:44:6b:2e:af:ac:c2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jun 6 23:00:58 2025 GMT
Not After : Jun 7 23:00:58 2025 GMT
Subject: CN=c8291022147fdfeb814352c2b49e4a79307f4cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:c3:d3:c2:8e:31:3f:ec:0b:55:09:eb:14:
39:c0:45:ed:9a:83:9f:1d:e1:63:a9:03:25:d6:7b:
7b:05:10:4e:33:bb:31:f3:d9:4c:46:32:81:94:2a:
5d:c1:40:5e:3d:e6:21:b8:1d:ef:e3:90:f2:ba:c7:
57:2d:5b:6e:17:03:34:4e:21:3a:55:cf:46:80:33:
30:c1:72:ca:92:86:9e:c0:9b:b4:9a:f7:ed:6a:46:
5a:2d:56:ff:ee:b9:50:1d:9d:28:e0:b9:48:6e:32:
e7:18:49:b9:ee:b1:78:0f:2b:8c:ab:31:f3:78:fe:
55:69:fc:f9:8a:d7:57:b4:01:e4:4d:3a:43:8d:4e:
78:b0:3c:19:86:63:b1:9a:8f:1d:35:ed:74:5f:c4:
57:8f:c2:5e:a7:66:bb:1e:f8:7f:9f:1b:24:e7:d4:
0d:47:40:5d:07:8e:10:88:f4:0c:d6:71:22:38:d8:
f7:09:7a:fa:6a:7e:4f:b4:d2:65:1b:17:5e:85:71:
0b:eb:4d:6c:a8:57:bd:06:bb:e7:da:99:05:6c:c1:
a2:65:00:71:4f:1b:1d:39:44:28:87:f6:02:59:8e:
8f:a5:50:c0:d3:e1:2b:93:d0:9e:f9:b2:a1:40:2d:
27:b8:9f:c3:7e:ec:0a:8b:28:e6:35:29:bc:89:5a:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:29:10:22:14:7F:DF:EB:81:43:52:C2:B4:9E:4A:79:30:7F:4C:D3
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f5:b6:f4:cc:eb:b7:c9:87:d0:8a:f3:ea:48:90:3e:c2:37:
aa:f7:93:c2:b7:9b:86:aa:20:c8:aa:3d:74:57:7a:29:4b:d8:
34:d4:f1:4e:1c:d9:7d:ca:44:8e:6e:06:71:96:2a:21:84:60:
25:ce:4e:8b:db:33:72:4b:83:57:77:e1:dc:61:5e:9d:e4:7e:
47:fd:1b:63:33:8e:f9:3a:fd:6c:54:00:64:91:d2:8e:bc:68:
08:a1:c3:2b:79:f4:ea:03:b7:60:98:db:37:b1:36:d2:c2:21:
8b:7c:c4:a1:f6:ed:13:bd:a2:c4:a1:13:04:b8:ff:85:e8:43:
d4:cb:8f:2d:e3:f4:fb:4e:ae:54:41:c3:ce:aa:63:3d:6d:e2:
f6:8a:f6:c4:28:fd:91:e1:8f:65:18:0e:ee:46:28:8d:6d:b9:
6f:de:99:64:99:83:d0:e3:d0:9c:d4:70:82:81:64:95:d8:98:
f1:77:df:8f:b7:2e:ba:26:8f:61:f0:c0:9f:6d:9d:0d:72:08:
3d:00:52:7e:05:c5:8c:59:1f:ee:9f:d4:87:ab:ea:7b:ca:73:
56:32:7c:0d:83:c4:a5:6b:80:2a:9a:2c:4b:a8:c6:0f:4f:2a:
f2:23:15:94:f0:13:43:15:09:58:d3:74:28:4d:9d:e6:dc:a1:
18:ea:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:29 2025 by rpki-client