Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: ow6ZC5JgpaCZXdUfJdC+BXKOAYEeVTiF2GRqSHGgAmw=
Subject key identifier: EA:8C:81:73:15:94:71:C2:F4:18:0C:27:5F:A3:FA:EC:55:62:88:94
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01974A0CDFACDB88934B7C58B4DC4AB423FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 0D62
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: drzeNHEG2iQYhBgFHgXcu7XPGiAcoHjMVFnbS7jb7xo=)
2: D7PGGduIwX7v-ShQSUz8OVV9C1w.roa (hash: 7ckgBrpQ8LkiNGwk/n+SRdsap+chU5QW5iJNm8qHanE=)
3: IrsYdpqcOnQ3SpbKBx6nFfzcVrQ.roa (hash: AIbJqohxVTkRlwXht+/E+fE7aYFk0d/YsXjveY/e/+A=)
4: QV_KHSRk0F1p49xmdU8Cjw9F95k.roa (hash: bXFoeKrbp3I/mSHJx/SNzgxE/ZuKpJd2GAhpkwSz+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:df:ac:db:88:93:4b:7c:58:b4:dc:4a:b4:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=ea8c8173159471c2f4180c275fa3faec55628894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:a4:a4:89:71:ef:57:16:c4:cb:48:10:be:
02:f0:4c:54:07:0d:b1:8d:8a:cd:c9:a7:a1:b8:66:
c8:3f:75:ee:d0:5f:f5:2b:a6:68:96:d4:15:fd:87:
f0:9d:8c:10:02:70:92:0a:38:87:92:01:8b:ca:da:
3e:dc:cf:91:cc:16:c8:2a:02:bc:1c:ca:78:29:c3:
de:6d:cd:2a:0c:62:61:87:13:5f:3d:b6:32:91:ad:
50:58:d5:df:11:5d:da:7c:79:36:46:cd:ed:b5:69:
2d:3e:01:5c:2d:7d:fc:f5:b4:1b:30:3d:77:d3:6d:
e2:f0:6c:dc:3a:03:fc:bb:28:ff:02:b6:33:fb:f8:
65:11:b6:77:76:69:d1:15:75:97:e0:ba:55:21:a0:
16:1c:b5:e6:1e:22:03:dd:95:66:fc:8a:b4:ea:7b:
ee:e8:91:9a:49:13:5b:cb:58:29:76:a0:59:f8:13:
b8:67:3e:c3:d9:ba:ae:a8:41:1a:9b:67:0b:37:df:
f5:d6:09:cc:51:1b:5a:a2:83:c4:2d:b4:17:b1:80:
30:8a:f9:ac:39:b1:48:20:7c:fa:4c:a6:de:7e:9f:
fe:f5:eb:2b:b3:5b:e4:92:b6:74:1a:c9:e4:40:98:
9e:83:71:58:86:31:ff:bc:76:86:c0:a8:4c:f5:23:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:81:73:15:94:71:C2:F4:18:0C:27:5F:A3:FA:EC:55:62:88:94
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:81:07:21:bd:f0:ca:e6:d4:07:36:80:68:49:47:69:9e:
e7:24:2e:96:ca:66:a7:0e:9d:9f:2b:db:94:84:81:ab:f4:c0:
16:fa:5d:c3:9c:22:6b:54:ff:7a:8b:f6:e0:a1:ac:c7:b3:3b:
46:bb:aa:9b:fc:43:61:29:07:35:01:40:70:02:87:29:86:21:
29:98:46:fa:1b:c0:3a:2c:8f:39:a5:35:ba:8e:b3:1e:ed:90:
62:4f:59:e7:f9:b8:82:bf:42:5e:73:bd:df:15:0c:ee:ae:30:
80:07:f8:fd:ba:ea:64:d4:79:9b:21:c1:09:47:10:e4:6d:f4:
6a:26:43:86:a1:f6:e5:f3:32:fe:8f:fb:a7:8d:e1:56:a9:af:
57:ee:a6:ee:ea:30:49:88:54:6d:13:03:c2:fe:a5:1c:83:d9:
05:41:cd:91:0c:b7:b0:2c:46:e9:4a:67:39:55:c7:e6:fc:fc:
59:33:73:b7:ae:9e:55:a3:78:12:3d:7b:cf:9b:92:16:65:b9:
71:63:c7:8d:d2:ae:bb:04:11:67:b8:40:bf:6c:05:79:78:18:
bc:7a:a5:ea:ae:f9:23:a6:75:89:03:8a:e6:9a:0c:5e:e6:74:
9d:35:0b:56:58:8d:93:99:a7:13:c8:78:94:8a:94:72:e7:cb:
53:87:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:39 2025 by rpki-client