Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: FVdm2PehX6qHZXu9vg2SofbjpmBOyywka4T7n5SnwGg=
Subject key identifier: FF:D3:4F:44:FE:31:8B:E9:19:4E:DB:88:7A:65:E4:8E:29:DD:21:38
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 0197518FA4370054731D73BC6F1BE2970328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 11C3
Signing time: Sun 08 Jun 2025 22:00:57 +0000
Manifest this update: Sun 08 Jun 2025 22:00:57 +0000
Manifest next update: Mon 09 Jun 2025 22:00:57 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: HlFrShNvUlZxa93/tJLiEHtrgUkxw8N4viCLKSqEVp8=)
2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:a4:37:00:54:73:1d:73:bc:6f:1b:e2:97:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Jun 8 22:00:57 2025 GMT
Not After : Jun 9 22:00:57 2025 GMT
Subject: CN=ffd34f44fe318be9194edb887a65e48e29dd2138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:83:4c:87:f0:80:dc:c4:0b:30:1d:3e:18:
2c:59:84:bc:42:b2:02:96:36:88:ca:01:0c:74:60:
09:b2:b1:ac:9c:85:17:ab:ab:f1:14:d2:05:6d:f2:
9b:60:c1:57:2f:2d:c1:55:7e:d0:79:00:1c:14:8b:
df:74:d9:d0:ab:e7:5d:9f:60:fc:c0:7e:8a:30:6b:
0f:19:a3:33:75:2a:8b:7b:3f:f6:49:b6:89:97:e8:
e1:7e:21:0d:5f:c1:8f:b1:1f:c5:d4:ec:e6:e5:76:
79:a7:61:e9:c1:b1:ba:97:13:df:61:2a:2c:3d:67:
1f:f1:cb:45:1e:5c:2e:e6:e1:af:b8:0b:19:9d:33:
ba:95:71:83:a3:3c:00:9b:dd:73:ea:6b:1d:5b:ca:
cf:4e:50:d6:e9:10:70:49:c1:f4:90:f9:d9:e4:7e:
a7:e8:7a:2f:f7:1d:0c:34:36:b6:8e:ae:8c:11:af:
11:9c:61:ab:80:1e:d1:e6:96:42:67:41:51:fd:84:
bd:97:d9:08:6b:da:a7:5f:7f:fe:45:54:a8:b3:5d:
8c:cc:19:ee:1f:e1:80:80:6a:b6:1e:1f:fd:99:2f:
fb:7f:eb:3d:fb:87:54:67:d8:2b:0f:c7:26:25:a1:
81:0c:af:96:14:b0:67:6d:d4:42:70:78:67:d6:8a:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:4F:44:FE:31:8B:E9:19:4E:DB:88:7A:65:E4:8E:29:DD:21:38
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9b:a6:7e:e0:ea:49:44:53:f3:bb:8a:63:2a:0f:46:a0:d4:
5f:a2:57:ec:5c:c7:49:7a:78:21:12:46:d6:c9:4e:cd:32:5f:
72:84:19:0e:6b:19:64:45:bf:bb:e1:52:fb:0a:b1:3a:59:0c:
10:c4:ce:d2:43:91:07:bb:d9:a5:6a:d8:28:53:91:86:34:bb:
ca:91:26:aa:39:50:12:28:c2:5b:dd:fb:b0:b7:e9:bd:11:01:
ea:f7:8c:8d:ac:cd:fc:dd:d8:21:a4:7e:13:f5:6e:15:87:46:
a2:91:e5:b1:2c:57:4d:6b:bf:65:ca:fb:97:75:7b:74:78:3c:
d0:19:7f:02:ea:f2:ea:6f:a8:1c:10:29:46:a9:f7:ab:c9:e4:
54:6c:11:73:7c:8f:be:fe:f0:73:9e:76:f3:05:bb:e4:04:bd:
7a:af:b6:5d:8e:44:a1:68:34:9d:48:b9:6b:7a:ec:0a:bf:f5:
41:9b:5d:df:be:37:a7:91:13:00:0a:e3:37:dd:4b:7b:1a:64:
cb:1f:13:24:5d:a7:f1:90:d3:91:67:e0:7c:67:b5:a5:15:4d:
e5:b6:ec:cc:d5:31:42:21:5b:a7:78:b9:96:fa:0f:3e:88:f1:
9a:b4:08:21:93:6e:f0:f7:08:a2:ec:14:ef:64:2e:5b:de:01:
61:e2:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:42 2025 by rpki-client