Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: mGHDwnrdWKNLIm/UQFiS+LEMFBZOk9zANuXuMoHx9xw=
Subject key identifier: 4C:8E:76:47:97:F2:83:C3:4F:00:50:50:63:F0:43:88:C0:FC:C5:FD
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 01974F334A393DEBE455BC7616854CC493D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: B8
Signing time: Sun 08 Jun 2025 11:00:50 +0000
Manifest this update: Sun 08 Jun 2025 11:00:50 +0000
Manifest next update: Mon 09 Jun 2025 11:00:50 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: P5ZB43jcyqu7AaogqP9Yl6DBIAxvxC/aCLA7+WeERKA=)
2: ghemx7_KeR2Mo7Zd7b3Yw7Rm5m0.roa (hash: dfuZiKRSGnfBsJSrGQVK/jOI9vvcNJZDWJg5sUNCJuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:4a:39:3d:eb:e4:55:bc:76:16:85:4c:c4:93:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Jun 8 11:00:50 2025 GMT
Not After : Jun 9 11:00:50 2025 GMT
Subject: CN=4c8e764797f283c34f00505063f04388c0fcc5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:c7:6b:f9:dc:e8:20:72:85:b3:48:a0:0b:
2f:fb:35:6b:ba:b5:82:59:f9:56:ce:2f:8f:1c:12:
02:d3:78:cb:40:2f:54:34:7b:6a:11:59:b1:80:31:
01:c1:2b:ef:37:9a:12:53:09:4a:ba:d8:34:81:2f:
df:3c:06:64:ec:24:1d:b0:5f:0b:ed:54:4e:93:25:
37:bf:24:42:48:b2:eb:05:7b:0a:99:a2:87:b2:66:
e6:a4:82:40:a7:86:39:86:91:bc:ab:f1:c8:36:3a:
c9:49:b1:44:c1:47:ea:83:5d:ed:57:73:f1:6f:b8:
c7:b9:73:48:36:3e:d7:e5:e1:c4:4f:af:c0:c0:93:
35:61:e2:a7:f2:db:79:fd:4a:f3:4c:6a:d3:cd:d0:
57:4d:b4:0a:94:ef:c6:1c:c5:40:e2:0a:56:a6:d7:
de:c3:b7:46:a1:fa:4d:22:49:1a:9d:f0:88:8d:a9:
60:41:7a:22:8a:0d:0a:40:c9:24:75:c2:60:39:6c:
82:9b:18:cd:5b:19:af:4d:a9:83:70:d2:b7:6a:1c:
cc:a1:9e:93:3a:a3:4d:a4:6a:4b:a6:5a:76:26:9a:
a2:48:54:a9:65:60:a7:83:82:0d:e3:fe:95:f1:8d:
94:fd:75:66:d4:87:92:2f:46:8b:a3:0f:a9:1b:37:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8E:76:47:97:F2:83:C3:4F:00:50:50:63:F0:43:88:C0:FC:C5:FD
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:61:91:0f:db:2a:ff:df:61:ae:9e:9c:d2:50:92:8d:82:ce:
30:6e:fd:53:e5:af:50:dc:e8:32:7e:be:51:3e:ea:53:6e:4f:
1e:49:52:36:8f:b6:d9:66:cc:e4:22:dc:16:63:15:b6:8b:71:
ad:f6:97:db:dc:09:c2:00:cc:d8:92:fc:9d:03:e3:a8:a7:92:
1c:27:dd:2f:7d:5e:b3:c1:5d:2f:48:5c:cd:17:d1:a1:7a:b3:
ef:03:49:74:c3:22:9c:d9:92:61:8a:00:45:b5:e0:f5:58:78:
fd:96:1e:97:4c:09:41:4f:18:be:fc:c4:a6:cf:62:7a:72:29:
ac:74:28:63:e3:93:7f:36:8d:e3:b2:e7:78:9a:e2:c9:58:1c:
3d:3d:b4:3c:f8:06:71:a2:c2:3f:40:57:24:94:78:f1:80:9d:
69:32:7b:61:29:4d:3f:26:e0:f0:fc:ff:fc:ea:c2:0d:80:fd:
46:a9:37:63:1d:48:71:65:5f:cc:62:3a:ba:54:37:6b:65:ec:
b5:9f:2d:42:05:b6:8a:05:0d:44:e9:a7:8c:8d:d7:31:77:fe:
62:bf:c5:d6:6c:d5:78:4e:3c:0a:52:95:39:cf:82:68:5c:99:
fe:ec:dc:30:49:5d:97:87:dd:d9:95:89:72:55:a6:5c:fa:e7:
58:13:6d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:00:44 2025 by rpki-client