Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: /iusrGJGJ04nGfbZJbOexwiM613HwPZ+n3YdpTLGP98=
Subject key identifier: 25:BC:FC:90:21:89:9A:46:FE:8A:97:43:CA:32:1A:CE:7F:5E:9B:4D
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 0197B632FA3B1EB19AF4184D90FDE25E2D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 138E
Signing time: Sat 28 Jun 2025 11:01:23 +0000
Manifest this update: Sat 28 Jun 2025 11:01:23 +0000
Manifest next update: Sun 29 Jun 2025 11:01:23 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: n7JDO6gM/P7fBuNjdY08nYkeR4u/ZKsm8BctiWqEMfE=)
2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:fa:3b:1e:b1:9a:f4:18:4d:90:fd:e2:5e:2d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Jun 28 11:01:23 2025 GMT
Not After : Jun 29 11:01:23 2025 GMT
Subject: CN=25bcfc9021899a46fe8a9743ca321ace7f5e9b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:35:f8:82:ba:33:d2:9d:b5:c5:b1:9b:e6:
4b:44:78:29:54:91:32:a3:5f:70:b6:6a:bc:0c:60:
26:97:ed:42:c4:67:44:92:68:08:a0:fd:d6:17:65:
f2:7f:5e:36:ad:d0:d3:d0:a4:5f:4c:a0:14:de:7b:
27:08:a4:b9:0d:78:e4:83:4a:1b:bb:bb:f2:e4:c1:
13:4c:f4:5c:a5:6d:a8:65:3a:41:1f:11:01:2b:d7:
33:40:93:5a:6b:8a:31:4a:36:e1:b4:06:c6:8c:81:
df:05:07:fb:b1:6d:21:92:4f:f0:d9:2d:29:22:8f:
ce:3c:17:97:28:5d:79:1f:35:b1:2c:92:db:21:2b:
7d:59:13:75:e6:e4:48:16:88:8f:6f:df:64:e7:4f:
bd:d8:71:8b:9f:76:d7:dc:aa:15:51:8f:39:40:e9:
06:76:68:34:61:03:1a:15:3a:e2:1e:6b:49:b3:4f:
51:3b:56:09:9a:c5:10:f5:02:52:a7:61:36:b9:61:
8d:60:5a:25:ff:bf:e7:48:23:d1:d5:0c:2f:b8:6d:
28:80:b3:3a:68:c3:2f:a0:d4:70:d5:1c:9d:c3:36:
f6:fc:a5:11:09:54:8c:36:ca:dc:dc:3d:f6:3a:62:
3b:c7:c3:9e:ac:7e:8b:54:05:9d:d6:bc:68:71:6b:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:FC:90:21:89:9A:46:FE:8A:97:43:CA:32:1A:CE:7F:5E:9B:4D
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2f:d9:9e:37:6f:c2:36:02:e9:43:01:56:f0:15:a6:83:48:
58:c0:60:35:1b:11:24:09:3b:42:58:23:5f:f1:bb:6d:ba:07:
cc:95:1f:dd:c0:28:fe:53:27:00:f2:38:4a:07:cf:f2:62:9e:
0d:1b:1a:f5:ad:7e:41:f9:33:be:91:1f:9d:0b:44:dc:4c:86:
d7:6a:9e:01:5e:07:b2:80:22:08:7a:89:f5:81:d0:83:fa:99:
37:25:8b:45:7b:41:51:ca:fa:5c:45:d0:05:6a:c3:1f:a3:ea:
f9:82:7f:52:52:69:78:bc:fc:16:1b:d2:80:0a:7d:00:89:02:
bb:c8:07:54:4e:8d:3d:09:31:50:9c:db:15:c2:91:41:06:d1:
a0:54:bd:4c:d2:13:f0:a0:74:d5:fe:24:6d:45:15:af:a9:a7:
9d:76:ba:0d:b3:b8:a3:df:c8:e7:54:eb:e7:09:21:4a:f4:16:
d6:c7:11:c6:d4:b1:e6:ff:b0:07:bd:c8:f7:e6:42:76:c1:d4:
98:ee:3b:b2:28:7d:71:73:7c:32:3d:5d:79:55:c2:84:4a:f3:
03:32:21:67:3c:c5:0a:3f:8e:ab:32:4d:f9:7a:c9:48:ea:2d:
c5:52:d8:1a:fe:ae:60:d7:0a:a3:61:b0:4f:cd:1d:1e:ea:4b:
7b:27:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:34 2025 by rpki-client