Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: lT3GOPTziZ/oZ6IWaLob5wPIPkhfbBC3ZI1sbSpeNY4=
Subject key identifier: 43:FF:D5:BE:1C:66:81:DB:0F:7B:6F:9E:DB:3E:1B:23:A7:E4:93:49
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019767A9390F2154DDE386351587634BE8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 05:00:32 +0000
Manifest this update: Fri 13 Jun 2025 05:00:32 +0000
Manifest next update: Sat 14 Jun 2025 05:00:32 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: URUfUeDZDyDmkpYwRf1DCO1Qd9vthdp1aea/+cTu0Ps=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:a9:39:0f:21:54:dd:e3:86:35:15:87:63:4b:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Jun 13 05:00:32 2025 GMT
Not After : Jun 14 05:00:32 2025 GMT
Subject: CN=43ffd5be1c6681db0f7b6f9edb3e1b23a7e49349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:ce:ff:c5:96:92:3e:6c:08:5c:82:24:5f:
9d:c7:b3:da:75:95:69:c0:8d:44:0d:2c:4d:79:42:
8c:c0:bd:0c:37:c7:89:f8:95:bc:73:90:3f:dc:69:
75:4f:e1:79:49:a4:0b:6a:d5:5f:38:66:28:e0:cc:
90:18:9c:27:4b:6b:9f:9e:7e:5f:2c:19:fb:11:4d:
ed:89:ab:3d:e4:c6:1f:43:55:a9:53:a7:06:34:b2:
83:8d:77:09:1d:01:0d:09:ed:77:31:ec:cc:8d:72:
87:e0:30:74:ae:88:01:ea:a2:a3:39:67:98:07:97:
6c:08:b6:ff:8c:fe:d3:1a:29:41:2e:45:78:a4:a6:
fe:4e:81:1d:3c:33:59:9b:56:61:81:fe:71:6c:88:
d1:5e:75:a7:97:91:d6:bc:09:5a:3c:12:2c:e9:16:
b7:44:7d:b9:39:01:9e:55:ac:fa:df:5d:f6:ba:19:
17:36:33:63:36:40:de:0a:32:2f:b8:05:dc:53:b8:
14:95:04:18:e1:20:d1:31:63:e4:38:ac:81:d4:0f:
52:4a:ac:fa:b0:cb:da:53:79:ce:76:97:e0:f1:92:
43:34:04:3f:ea:cc:56:8d:a9:30:ba:70:45:2c:1b:
f6:e8:34:0f:b9:21:86:d0:a5:19:b5:56:09:33:38:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:D5:BE:1C:66:81:DB:0F:7B:6F:9E:DB:3E:1B:23:A7:E4:93:49
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:ad:39:c1:b0:bd:fa:aa:ab:3a:da:5b:24:60:00:4f:e3:
e8:b6:10:4c:81:5f:8d:18:59:51:7f:9d:cd:72:47:b0:61:f4:
a9:35:87:fe:f1:10:c7:eb:03:11:a5:41:ae:c2:a2:1c:89:41:
a1:07:65:69:51:9d:05:f2:88:82:7d:8c:a8:e3:28:12:d1:a7:
65:e6:d5:0f:1f:be:f8:1c:d4:da:00:45:70:7b:cb:91:b4:9a:
bb:37:be:54:78:ba:b7:fd:9f:dd:8e:bd:54:22:01:df:4e:87:
91:3e:7f:3c:51:d7:7f:c9:c1:1f:f2:22:40:4b:02:39:29:41:
21:ad:0b:4b:33:bb:bc:af:ba:c3:c2:3b:09:2b:c3:d2:63:3b:
54:8d:25:97:fd:a4:2e:cf:4d:6e:a1:18:d1:7f:62:a1:2e:0d:
c6:a1:0e:d7:a8:ae:ae:10:55:68:12:cd:c3:e2:77:a0:ef:31:
b5:fd:65:d4:ff:45:44:c5:b6:f1:91:f4:91:ad:a2:49:35:de:
16:6e:0d:83:79:d2:e3:e2:41:a4:4d:41:0f:d8:73:9a:8d:c6:
d3:83:98:ec:11:76:7d:e9:87:b2:60:52:4c:6a:db:10:38:57:
f9:4e:3d:a6:3a:13:d6:40:00:e0:c4:d7:b9:b9:12:fc:e9:1c:
cc:ad:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:05:30 2025 by rpki-client