Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: aBH7U09TmgtZIOsQfV1xyXi+1hQDU2T+WJx4GKHv+dQ=
Subject key identifier: E1:AB:55:5C:E9:35:26:7E:81:54:2F:EE:EA:5F:3B:BD:79:70:A9:3D
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 0197B70EB701AFBEC0C39E2BD1585E0193FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 02E8
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: Q67L6Zn9ixeEIRFTCYvD9LvX0uheXnKFmLc8Y1wKhas=)
2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b7:01:af:be:c0:c3:9e:2b:d1:58:5e:01:93:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=e1ab555ce935267e81542feeea5f3bbd7970a93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:b2:a2:a0:eb:89:41:bd:7e:03:2e:64:f9:
4a:0e:aa:5a:46:3b:f3:bf:1d:bd:27:80:91:48:58:
5e:28:ce:cd:3f:a9:ac:4f:92:31:f8:2c:ed:d7:e1:
4d:5b:7f:8a:c9:e1:8c:c4:4a:0c:09:51:67:78:40:
a8:0f:9c:10:7c:6f:6f:a0:64:c3:dc:78:8e:94:1e:
61:16:a7:27:64:49:29:5e:59:16:4d:16:69:c5:5d:
4d:69:d4:4e:94:2a:21:db:84:c2:86:64:33:77:14:
4f:99:9b:15:45:71:f4:ff:af:9e:78:14:3f:96:f4:
a6:a1:95:a1:c0:3a:ee:87:9b:ec:a4:38:40:66:1e:
34:80:d2:f8:f3:06:dc:53:bb:a0:fe:9b:00:21:8c:
f5:f0:ce:17:bc:91:77:ee:e9:f1:85:09:0d:a3:c2:
60:eb:3e:05:13:17:54:61:2f:40:9b:58:0e:59:cc:
f4:87:ea:f5:bf:21:f7:f9:79:06:45:7e:d8:77:62:
30:57:16:0f:72:d7:a1:bf:64:cd:28:bf:81:3a:6a:
1b:86:89:17:83:97:13:d7:e6:53:d4:ce:c8:b2:b5:
2f:37:81:66:21:47:ed:53:85:74:7d:14:02:ef:a9:
05:18:16:5b:40:ac:2b:0f:81:01:96:6c:2e:d3:9b:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AB:55:5C:E9:35:26:7E:81:54:2F:EE:EA:5F:3B:BD:79:70:A9:3D
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:47:d6:59:fe:b0:5a:18:70:7a:45:eb:ab:d2:b4:fc:58:67:
7e:a7:05:44:2b:9b:30:5f:79:a1:88:2c:b3:51:7d:88:d8:bd:
2b:23:b6:af:16:6e:97:ee:b8:52:60:d7:84:2d:7d:f0:04:ac:
d7:a6:b0:5f:e2:f0:cf:2d:11:ae:99:a3:0c:5b:20:6f:1c:6d:
e3:19:fc:86:5d:c6:98:57:50:da:d4:6f:4f:83:5f:18:35:8c:
88:0f:0d:93:d4:34:3e:41:ad:95:a8:c9:89:c5:90:b2:fc:52:
61:82:4d:f4:d0:67:16:aa:12:3e:34:19:1b:73:9c:63:30:37:
11:04:29:45:02:81:86:57:2c:83:8e:4c:22:06:c1:ea:86:4c:
47:b2:c7:52:79:79:3c:b2:1c:ab:11:e6:0f:12:c6:bc:1a:3b:
eb:28:5b:fa:94:d1:d8:15:0b:40:80:0c:f7:d4:73:f3:e8:98:
ed:03:0b:95:75:27:a4:ee:d3:bd:57:92:c6:55:66:b5:5d:9c:
77:35:43:63:06:0d:b2:7b:4f:a4:0c:08:4f:59:90:fd:ca:4d:
9e:b1:e4:d6:5b:32:20:f9:da:65:dc:dd:e4:7f:d6:27:18:97:
15:88:b7:28:d1:99:20:15:d8:9c:b6:cd:e0:f5:5a:5f:b4:f7:
d7:23:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:22 2025 by rpki-client