Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: OO0QCiZ7fyNKyQuuBOq+Gd997Vnn3e+LIqRgZpIjFGA=
Subject key identifier: 47:C5:16:47:78:24:2A:C6:9A:25:77:4D:A5:9F:E3:D6:51:A9:A1:52
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019745F8EC4B14D36FEADE1A5F76C50E3AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 08F8
Signing time: Fri 06 Jun 2025 16:00:30 +0000
Manifest this update: Fri 06 Jun 2025 16:00:30 +0000
Manifest next update: Sat 07 Jun 2025 16:00:30 +0000
Files and hashes: 1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=)
2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: 7JJIrpDvZnFI+yk7GJy+rl3j0pieifx3WKxCfIWia+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:ec:4b:14:d3:6f:ea:de:1a:5f:76:c5:0e:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Jun 6 16:00:30 2025 GMT
Not After : Jun 7 16:00:30 2025 GMT
Subject: CN=47c5164778242ac69a25774da59fe3d651a9a152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:61:af:89:1c:85:1c:5a:f5:2f:d6:fa:4a:
d8:4d:55:c2:c5:b9:9c:78:38:74:18:dd:3d:02:8f:
ae:97:72:7f:4d:87:54:41:f4:24:8c:38:18:66:6f:
87:a0:3c:05:3d:3a:81:67:b1:6c:97:a8:f3:4f:a5:
ea:ae:1d:e3:f4:5b:47:3f:2d:21:ab:ab:c1:8b:93:
2f:17:8a:b0:f0:d5:c2:98:82:1e:e9:30:2e:e4:33:
4a:db:a9:42:a2:53:90:1f:02:a8:e1:c4:07:99:a4:
53:fe:1c:69:2a:8a:8f:3d:b5:3f:3e:43:91:3f:74:
2f:d5:62:29:cb:d6:8a:85:6c:4c:05:7a:14:88:82:
5f:4c:da:7d:2d:69:83:e3:59:04:9a:3f:dc:41:21:
6a:12:13:95:49:61:83:76:ad:14:41:4d:86:6f:29:
e9:f8:cf:64:93:86:9f:68:23:0a:eb:3c:b5:7c:d7:
65:4f:b6:dc:1d:95:ce:e3:2b:8d:61:7d:b8:de:1d:
a0:b9:d2:e2:de:63:38:c7:19:fb:82:b2:a7:42:e3:
90:ce:06:f9:8f:26:64:ff:e6:a0:0a:88:62:2d:7f:
07:4e:fd:95:03:ba:15:ee:ce:86:36:df:2a:bd:e6:
4d:b8:67:a8:e1:44:cf:6c:84:b2:d2:c8:64:02:74:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:16:47:78:24:2A:C6:9A:25:77:4D:A5:9F:E3:D6:51:A9:A1:52
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:47:b5:f9:bf:2c:b5:19:bc:e1:e3:a5:2f:2e:00:7e:15:
0f:36:5c:7b:70:4d:b8:40:1c:72:79:0b:ca:26:41:08:5f:64:
cb:9a:15:01:87:0d:2c:21:fa:50:21:77:92:22:ba:92:15:78:
f5:5c:d9:17:d4:7a:64:64:ce:d8:35:60:3f:c0:7e:e8:8c:8d:
3e:09:33:0e:c4:6f:9e:c2:f6:44:dd:cc:17:bc:f1:5c:95:f7:
6d:0e:78:97:5e:67:37:24:7e:7b:b2:23:44:00:04:2c:7a:3b:
b2:85:63:b3:78:86:ba:f0:ad:4f:22:79:8e:76:9e:0b:dd:1c:
22:48:bb:25:d1:f5:7a:03:c9:34:a5:fa:e8:a9:35:d4:c8:c7:
06:ad:68:69:66:55:ed:55:88:0c:00:b5:70:fc:96:ca:51:d6:
2e:a6:ae:4b:62:51:2e:b4:f8:04:54:76:1c:c7:87:94:c0:02:
52:c0:19:47:ce:03:fd:43:82:08:67:8f:fd:d2:54:76:e0:04:
3b:be:f7:b2:25:86:92:dc:fc:08:30:9b:10:2b:ab:c2:f8:68:
9f:3d:95:3f:44:7c:14:d8:89:f4:85:86:8d:61:61:a8:9f:f9:
4b:ec:ea:87:77:39:72:9b:fd:4f:65:92:cb:80:94:e5:fa:9f:
ed:90:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:18 2025 by rpki-client