Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: ntW+XmD3bABaq1cJ7JlOAZgVcOnxXAdiN+VBByi0FoQ=
Subject key identifier: 5C:D3:E4:58:6F:BF:10:A9:02:8E:00:45:B2:83:F3:12:73:E4:43:1E
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019769979F8B1D2BAE6FC2A0CA843E23FB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 14:00:33 +0000
Manifest this update: Fri 13 Jun 2025 14:00:33 +0000
Manifest next update: Sat 14 Jun 2025 14:00:33 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: 3AEf0PFP5p4tWRDAZwVfmTSaHgvSsivbmic0rO6Gacc=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:9f:8b:1d:2b:ae:6f:c2:a0:ca:84:3e:23:fb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Jun 13 14:00:33 2025 GMT
Not After : Jun 14 14:00:33 2025 GMT
Subject: CN=5cd3e4586fbf10a9028e0045b283f31273e4431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:b5:aa:32:20:92:15:86:67:a7:d3:7a:dc:
c3:c5:96:5b:a0:23:32:be:ff:44:47:58:93:5a:e3:
0e:a5:62:dd:1f:27:48:41:7b:ab:99:64:7e:1e:64:
f0:2c:ca:01:10:7b:ad:9d:64:c6:e6:1d:16:71:6a:
90:bd:7d:d4:1f:3b:d3:3d:81:6d:02:89:49:f4:06:
39:84:42:b1:5b:9c:ba:dc:59:3e:d4:7c:18:8d:e1:
12:4c:77:35:7c:18:fc:ae:a3:99:dd:1a:08:93:25:
f2:68:ce:9f:cb:93:ca:aa:e6:60:41:8d:48:9d:e9:
65:c8:f6:8f:93:c7:f4:96:59:9a:2d:78:0a:c4:79:
16:ad:31:c2:78:0b:03:16:80:57:bd:ce:2e:01:22:
56:53:0f:5e:b9:7e:fc:fa:4f:48:a3:c6:96:95:af:
a4:09:4f:cf:ce:b0:97:7a:cd:a1:04:70:eb:c5:0d:
b9:03:44:ed:aa:3f:12:71:63:f6:73:ef:40:0b:64:
ce:ec:71:95:33:18:b5:84:f6:92:0f:34:2c:48:23:
77:93:8b:b8:b5:f7:83:4c:89:d4:12:a3:1d:79:75:
86:15:5e:8c:1f:64:e8:d3:3d:57:81:64:c8:40:fa:
fa:23:e5:85:6d:00:3d:db:6f:04:a6:ee:dd:77:45:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:E4:58:6F:BF:10:A9:02:8E:00:45:B2:83:F3:12:73:E4:43:1E
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:a3:7e:e1:fa:41:06:ee:b9:7a:0b:17:2c:88:23:59:e6:
31:60:d6:95:0c:e3:da:9f:7d:25:db:42:1a:ff:3e:ab:de:c1:
25:8d:76:71:04:f0:28:ec:a4:4e:38:0e:18:95:5c:24:92:59:
47:bb:80:ec:b7:80:09:cd:f8:5c:30:65:d3:b8:a6:cf:b8:8d:
a1:f5:09:c6:c7:ea:ed:dd:1d:60:17:12:e3:a6:a3:0e:dc:37:
b8:42:80:d8:03:58:4a:ca:66:9d:ed:53:54:bc:a6:a2:35:2a:
a7:18:4e:f4:2a:5e:a9:76:01:fd:64:c4:5c:86:95:4a:e3:fb:
af:4f:bc:75:69:5e:20:8b:be:51:f9:6f:ac:32:09:d5:01:66:
05:d2:36:e5:e0:9a:ea:28:df:bf:ae:e7:01:d0:be:28:8f:5b:
62:a3:d1:c1:65:8c:79:ed:5b:e7:24:c7:5f:9b:55:b7:32:5d:
56:31:e8:63:59:55:07:60:13:0a:3b:0c:b8:84:a1:81:c1:0d:
28:d3:41:dd:2b:6a:52:2c:f5:71:8d:b9:48:d2:ee:9d:8b:36:
6b:06:06:72:49:38:81:db:0d:6b:17:82:ba:4e:02:9e:4e:0f:
97:82:4d:a2:42:7a:98:ae:31:b7:7d:d1:6e:40:c6:42:0e:8b:
c5:a0:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:20:28 2025 by rpki-client