Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: eUAEJZR0vst29Dhjkmd8b/aPYsgzDF/hsRU0T8340AE=
Subject key identifier: FF:BB:66:B5:20:4C:2D:A8:24:07:E0:23:46:7F:6C:E3:79:67:8C:95
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019749317819D76AB7059B68B2774416D051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 1130
Signing time: Sat 07 Jun 2025 07:01:08 +0000
Manifest this update: Sat 07 Jun 2025 07:01:08 +0000
Manifest next update: Sun 08 Jun 2025 07:01:08 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: XMAUznnLrd4r3N8lBn7lUvIBBD53R4dnY32RogsuHa4=)
2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:78:19:d7:6a:b7:05:9b:68:b2:77:44:16:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Jun 7 07:01:08 2025 GMT
Not After : Jun 8 07:01:08 2025 GMT
Subject: CN=ffbb66b5204c2da82407e023467f6ce379678c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:40:76:d5:7e:e5:dd:96:01:70:0f:73:e4:
4f:92:eb:e9:df:b8:8b:da:a6:f1:d2:bd:48:67:23:
7a:53:35:4a:4d:92:fd:76:be:4e:9f:90:29:ca:bb:
8e:ba:ad:8c:1c:cd:f0:4b:1f:a1:a3:fc:2a:cb:cc:
25:52:10:bc:f8:e6:fd:51:fd:fa:84:54:f7:16:35:
36:de:5f:95:87:f5:b6:90:36:66:d3:d1:8f:5d:1f:
d8:83:86:fe:31:c5:f1:24:7f:95:15:e5:90:ab:57:
92:10:91:ee:38:00:90:94:b8:d3:f6:d3:a9:d4:7f:
db:ca:4d:49:40:08:cf:00:4e:4d:c3:09:12:3a:44:
60:c5:32:90:94:51:66:97:d1:3c:70:59:9e:63:16:
c9:e0:e6:8a:c8:be:94:e9:23:ce:2d:4c:38:87:f3:
92:e8:60:22:85:4b:33:4b:b1:f4:28:3a:ae:43:93:
8e:f0:9e:03:a3:80:46:65:78:c1:a8:fb:4a:14:56:
cc:cf:c5:f8:10:81:f0:f8:40:4a:d1:1e:25:34:be:
99:5b:1f:e5:37:4f:d8:5f:4f:f1:09:c7:32:9c:1a:
d1:d2:2c:65:57:2f:30:47:fb:9f:e6:f6:6f:c5:25:
8b:d0:79:eb:be:99:83:cd:5e:da:2b:ed:c1:76:87:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:66:B5:20:4C:2D:A8:24:07:E0:23:46:7F:6C:E3:79:67:8C:95
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b0:0d:e6:a4:66:9b:39:29:b5:2e:a5:c9:95:dc:58:a2:1b:
69:74:02:e7:f8:59:3c:23:d3:af:fe:02:cb:e6:3e:08:97:4c:
f7:4f:06:3b:5b:b1:38:34:47:ee:dc:c2:d1:fc:0d:75:ff:ab:
c6:7a:9a:c9:d8:c1:e0:84:2a:56:f2:dd:78:56:04:2a:9d:4e:
dd:e5:f2:fd:fc:ed:fb:26:e4:51:ca:80:83:21:9f:94:9f:2b:
49:e1:d3:16:72:50:2d:2e:df:30:51:24:b8:1d:01:26:c7:1f:
06:ac:60:0c:4a:aa:f8:e6:4c:2e:c0:6d:8d:3f:2d:50:bb:ef:
0b:a3:22:58:f1:74:4a:ba:0c:6a:2c:e3:73:ac:71:ac:c5:91:
84:f9:59:54:cc:39:d6:ac:43:ca:b5:31:e3:2c:51:75:55:2f:
b5:51:26:3b:8c:5a:d4:17:c8:f9:63:80:47:fd:9e:06:7d:7b:
ff:fc:4b:27:14:ba:10:5e:a5:e6:64:13:12:8f:8e:e6:00:da:
82:76:f1:21:51:da:4e:a6:98:2e:e5:46:64:9f:44:12:64:8e:
f6:a8:98:31:ac:7e:13:3a:70:70:83:bb:19:bd:dc:81:d2:b9:
e3:2e:3a:e5:d8:cb:8a:03:81:07:93:d9:d4:c5:44:a5:92:2b:
fe:b0:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:49 2025 by rpki-client