Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: BxDIQMiB6rJnpzqS8M+q2/qFq27BKohk27QDE9aXFh8=
Subject key identifier: 30:A1:A0:4E:1C:BA:D5:04:29:1E:34:42:62:D7:F7:E0:BA:E2:01:CF
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 01974C32442EF522A8C6825360D09A7EA0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0CB8
Signing time: Sat 07 Jun 2025 21:00:52 +0000
Manifest this update: Sat 07 Jun 2025 21:00:52 +0000
Manifest next update: Sun 08 Jun 2025 21:00:52 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: RXhwDmwWP2IQMuLgtPLJoUGHtgZaJe+SY50jdgHd4co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:44:2e:f5:22:a8:c6:82:53:60:d0:9a:7e:a0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Jun 7 21:00:52 2025 GMT
Not After : Jun 8 21:00:52 2025 GMT
Subject: CN=30a1a04e1cbad504291e344262d7f7e0bae201cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:61:8a:44:d7:c0:ef:0e:0b:2a:3d:16:1d:
17:4e:64:3b:03:2b:6c:e4:9a:35:5a:52:71:ab:77:
0f:41:a8:09:c9:6e:96:9d:c2:77:3f:f8:18:1c:1c:
7f:b6:c0:75:56:b6:ab:ec:23:90:24:91:73:7f:b4:
cd:d5:b1:3a:6e:29:24:fe:11:bc:75:c6:dd:71:5d:
49:1c:ac:25:15:ef:01:aa:16:3d:0b:70:6d:d2:fa:
44:4b:f8:22:bd:f5:48:a1:5f:7c:7a:aa:c9:3e:fc:
cf:22:db:5c:bf:55:2a:68:41:a3:ea:c9:53:3f:ce:
f3:63:7a:80:13:3c:4f:75:28:91:f7:78:05:b1:e2:
4f:0d:57:e2:d8:ef:0d:6a:20:03:88:c9:7e:bc:2d:
c4:ac:55:e5:7f:da:93:3a:90:13:f1:d4:eb:5c:09:
62:23:ee:1b:03:bb:18:91:bd:99:72:67:53:c9:3f:
fb:9d:66:92:4f:51:de:55:66:99:cf:ed:87:b0:56:
35:a8:50:66:21:3e:4c:e2:d3:67:ba:94:80:52:7e:
23:1b:95:69:12:38:dc:4d:4b:96:13:72:c4:a8:fa:
5f:cf:4f:9f:90:af:fd:5c:84:7d:d1:fd:83:c6:21:
64:b6:13:7a:d1:c9:b0:46:02:52:37:dd:d4:5c:a4:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A1:A0:4E:1C:BA:D5:04:29:1E:34:42:62:D7:F7:E0:BA:E2:01:CF
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:26:4b:89:5e:d1:5a:e9:45:21:69:ac:cc:91:3d:36:f7:b0:
08:d7:08:b3:74:c7:7a:4c:04:a2:94:8c:88:fa:83:0a:eb:d2:
b9:c8:b5:84:4c:8a:a2:4c:83:51:36:13:71:03:ee:0b:76:34:
7b:04:99:a4:ae:c2:00:0b:78:e5:32:94:aa:26:39:c4:24:1a:
42:75:3a:2b:96:fa:24:ad:da:e1:90:0a:47:cc:3e:3b:01:d8:
e2:29:9a:68:4d:5a:8b:f8:d9:c2:67:8f:29:3b:31:c7:1f:72:
35:3c:0b:87:59:cc:0f:fe:58:56:1a:f3:9a:1f:97:43:b8:78:
7e:ed:c4:06:3f:7d:90:91:d6:c7:f0:0a:f7:04:84:62:41:45:
af:d3:65:8a:38:df:e3:3a:2a:94:17:a2:11:d4:4e:12:19:20:
c0:a7:76:c5:a5:61:c1:aa:a6:b1:52:65:1a:ba:c4:43:59:0b:
2f:23:01:59:6c:1b:69:01:44:93:63:24:01:7e:2a:fd:b6:20:
01:22:71:f0:16:55:9e:dd:63:2a:2d:a7:fe:72:d2:99:ad:bb:
fb:61:bd:6b:d4:a0:2c:b8:6f:1f:43:7f:f0:75:b8:22:a2:ff:
c4:3e:bd:e2:1c:33:42:cd:f8:60:a4:43:e0:78:05:85:56:ed:
3b:84:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:28 2025 by rpki-client