Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: lKXi09GaccqVEXao9iMx1d2t0bjg2pVjv4QlIQoHVvE=
Subject key identifier: F6:C8:EC:F0:E0:C8:EA:33:3F:8D:07:B9:1C:03:F5:E4:9B:53:DA:2F
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 01974779BEC213A8FB1CC19973550BDF974E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 13FB
Signing time: Fri 06 Jun 2025 23:00:50 +0000
Manifest this update: Fri 06 Jun 2025 23:00:50 +0000
Manifest next update: Sat 07 Jun 2025 23:00:50 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: batn43YhdExUsvTvyDvnkF8Ggp7WuOwBhWc733gJ4nQ=)
2: NTq0FDzH2xxPaa-1hxtnePIlEA4.roa (hash: LRFHdSsVugdN6TwKBfGKGPR3Nf4KsaI4iw69J8bmMBI=)
3: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:be:c2:13:a8:fb:1c:c1:99:73:55:0b:df:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Jun 6 23:00:50 2025 GMT
Not After : Jun 7 23:00:50 2025 GMT
Subject: CN=f6c8ecf0e0c8ea333f8d07b91c03f5e49b53da2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:e1:ad:e7:76:54:53:0c:be:75:26:fe:c5:
f9:8e:3f:44:1e:1c:57:c7:5a:91:df:ab:79:e0:ba:
b4:c2:57:cc:21:12:dc:52:cb:59:b4:2b:2e:22:58:
38:c6:8f:65:b3:fb:97:ce:63:aa:f2:9d:d5:4d:d1:
25:97:df:60:00:9d:bc:15:cf:44:7b:d4:02:8c:07:
a6:52:ba:0b:d9:01:cd:a4:a3:76:e3:42:03:65:a1:
cd:4d:e4:dd:62:8d:41:60:19:e6:73:a7:02:40:a5:
69:54:dd:27:4e:5e:14:0e:f1:86:e5:87:cc:2f:15:
73:59:e5:26:b4:69:5e:02:b1:0a:d8:20:ef:ad:95:
93:a2:d2:d5:18:ed:2d:4d:ff:91:d7:52:f9:e0:a0:
e0:db:0f:96:5c:cf:71:67:11:ad:07:fa:b5:b0:ff:
ba:ff:f2:13:ec:90:47:75:a6:05:dd:a5:db:e2:2f:
b4:4c:bb:5e:71:31:74:ec:7d:12:be:d1:a4:70:a9:
50:2d:3c:0a:f8:69:29:ab:1d:f2:ae:e4:2d:c7:ed:
5a:c2:8b:eb:7c:34:2e:58:87:73:31:b3:7c:48:f4:
47:db:b0:76:1d:fb:bf:3b:50:9f:4d:01:88:4b:03:
60:3f:b4:c4:4f:db:40:fc:70:04:5c:28:2b:bb:fd:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C8:EC:F0:E0:C8:EA:33:3F:8D:07:B9:1C:03:F5:E4:9B:53:DA:2F
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c8:91:b6:e9:2a:8a:32:70:8d:85:68:63:f8:f2:54:4e:6f:
a5:6e:91:c6:fa:21:7a:ab:5c:c6:c5:3a:70:35:49:33:be:d7:
eb:86:5d:1e:7e:88:1c:82:dd:85:32:f8:03:ff:c7:17:9a:5c:
ef:e6:47:d9:c7:2e:af:d7:3a:0c:71:06:b5:12:a5:4e:30:2b:
53:71:76:25:25:fc:44:37:fd:c0:81:d2:3a:db:1d:3e:e4:01:
d6:97:72:dc:99:4d:f3:c6:28:27:6e:64:b9:54:f2:b1:44:27:
84:63:8c:f4:24:7c:56:34:fe:74:2e:b8:3f:46:98:a7:b5:0c:
60:2e:7a:00:1c:4f:f5:0f:b4:c3:79:a2:56:19:5b:0b:18:db:
3e:c1:41:8e:00:86:38:64:1a:d9:43:a8:d2:aa:f7:d1:91:7f:
6f:28:fd:22:ba:42:14:11:ee:7d:99:bd:d6:1e:8c:56:5c:40:
f8:3e:56:6e:81:2a:b7:44:56:ad:75:86:fa:c9:79:6f:cd:a1:
72:e7:23:b0:7b:c0:4f:37:ee:c4:8d:f2:6c:bd:ec:2b:be:ea:
de:e2:3a:59:c3:ac:8f:59:a3:e0:19:3a:d0:2b:a7:1e:7f:50:
1a:c2:5a:9c:fa:f0:bc:67:41:41:30:cf:8b:fa:05:3c:8f:e5:
49:f0:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:32 2025 by rpki-client