Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: sUw+38aTLB9TIp7IdfHQoyKbESIODlKLzxLyLhXqX44=
Subject key identifier: CA:99:0B:30:E4:74:18:F3:69:5A:77:DB:68:46:14:BE:1A:89:7C:FB
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 0197B74586C5574BD378598E37AC49A969F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0BDE
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: 1/M8OmKARqMECVctXSVdbrJ4GVQwfYC1eKkNAvWcXvo=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:86:c5:57:4b:d3:78:59:8e:37:ac:49:a9:69:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=ca990b30e47418f3695a77db684614be1a897cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:b5:01:6d:ba:08:f9:fb:3f:e7:20:d1:fa:
b1:75:c0:ab:36:39:42:cc:00:e9:f2:30:31:18:ff:
2d:48:a1:34:87:89:ad:75:06:3f:07:07:68:2c:4c:
e6:55:b9:b4:70:a6:78:63:2b:48:3b:1e:ca:19:22:
cf:c4:1e:84:4c:57:1a:9c:53:d0:4a:a5:98:e8:60:
a0:aa:8b:d2:64:55:fd:50:23:90:7f:f0:25:39:90:
75:4c:70:7e:4b:31:19:f2:5a:70:ac:5c:71:25:9c:
55:54:25:b5:e3:67:9d:4c:3d:02:0a:91:68:0e:69:
93:dc:67:b0:33:c0:63:c6:82:84:bf:a2:fa:a1:15:
96:e6:4c:20:0e:fb:9d:46:66:e9:0b:b7:cd:24:32:
eb:68:ed:d5:e3:2b:01:16:c8:ab:60:48:f1:3d:11:
68:37:b7:b7:db:e9:a1:0b:63:d2:0f:2a:c3:4d:43:
16:0c:89:3e:56:2a:99:77:5a:11:8b:8d:30:e6:f1:
8f:fa:f4:74:1d:81:e5:c6:67:e3:9c:38:3e:b8:af:
fb:cb:ca:4f:bf:99:0f:e4:f6:f6:26:d0:98:76:4d:
c4:4e:6a:20:1f:f4:b8:ad:5c:0f:62:bc:64:86:54:
ea:c4:2f:eb:1a:54:47:44:a0:70:7f:33:d2:e4:4e:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:99:0B:30:E4:74:18:F3:69:5A:77:DB:68:46:14:BE:1A:89:7C:FB
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:a0:51:a4:16:be:bd:6c:a5:8e:ba:25:81:77:dd:89:ef:
57:52:94:0e:a9:e6:c1:a6:54:44:5f:84:03:3f:9a:75:8e:eb:
eb:0b:55:1c:44:ab:7a:e7:bd:d4:4e:46:32:d7:c2:b5:33:ce:
fd:30:2c:01:26:ab:df:ee:b4:a4:7d:f8:6a:d7:68:48:38:9b:
98:33:4b:37:dd:eb:ea:ac:d2:1c:bf:49:4e:7e:ec:8c:07:52:
27:90:35:f8:27:d4:66:46:1a:ed:38:e3:68:25:4a:c4:c3:10:
ff:f3:ad:bd:fb:10:52:d0:73:d1:c4:56:2a:0a:37:28:b9:e6:
52:46:fd:d3:0c:f2:41:63:60:40:a2:97:b7:80:b6:ff:cd:50:
fd:61:93:51:27:59:f6:6c:1f:ec:a3:f5:b1:57:28:d3:57:51:
23:47:17:12:7c:81:90:ab:ce:ee:30:48:7b:bd:d3:89:40:33:
10:35:e6:46:28:05:59:6a:8d:4f:be:e8:e2:0a:fa:ec:c7:b4:
f7:9f:0c:18:0d:e1:07:ff:2b:88:eb:50:58:93:b1:f1:65:dc:
ed:11:47:6c:b6:f5:38:08:df:61:05:07:5a:84:2c:cc:24:0e:
35:02:84:94:7b:b5:17:98:71:97:5c:26:19:47:36:11:3c:53:
3e:f9:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client