Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: 1mkbOIv4zrVDUnMIQGFNP/hZFtBCvs0FAsHaNyJ/fGw=
Subject key identifier: 41:E9:FF:94:E7:AA:DC:E0:1F:03:4B:6D:5C:85:82:12:3B:EE:8D:B3
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 0197B70E6AC3002782011F798249BC15D587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: DUFZ321cn4DO45xhslW7Q6O978OgDy8sNQiN5oW0N7Y=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6a:c3:00:27:82:01:1f:79:82:49:bc:15:d5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=41e9ff94e7aadce01f034b6d5c8582123bee8db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:4a:1f:30:ab:98:1f:0a:4f:12:5f:bc:a6:
59:9d:cb:72:dc:8c:5a:d3:60:bd:fe:59:c9:d6:52:
60:75:15:31:2d:c9:af:a8:d0:38:06:76:02:74:08:
ab:54:c1:3f:78:b0:e1:11:a5:41:79:cb:df:c6:b0:
27:8d:39:1a:91:66:74:69:98:e1:eb:52:fd:b2:e8:
17:2c:bf:58:f1:bd:94:e5:9c:7e:f3:91:dd:e1:49:
28:13:d2:4a:f5:56:7f:20:ac:71:37:f2:80:e7:5e:
35:01:d7:7a:cb:e6:b6:a6:52:90:c9:e1:68:6f:a0:
0b:5a:c4:40:3f:ea:29:34:cb:fd:89:60:fc:93:95:
e5:5a:e0:fe:41:a2:38:1e:4d:9e:c7:d4:f2:21:bd:
3a:10:46:ca:61:49:50:d8:49:c3:cc:53:5a:9d:50:
cf:c2:dd:1d:60:a5:ea:ce:64:ba:1a:2b:00:93:41:
a2:d7:2d:16:e6:37:58:6b:32:b7:00:cf:8a:84:91:
14:94:c8:3a:2f:13:5b:86:1d:a2:4d:14:9d:7c:b5:
48:df:8c:23:66:ee:2c:10:e4:d0:07:d8:6e:b5:f9:
7d:59:74:5d:11:b6:a9:8a:5f:80:6e:bf:ed:b1:24:
b4:76:e6:e7:fa:21:2f:f7:b1:d9:cb:eb:bc:25:37:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E9:FF:94:E7:AA:DC:E0:1F:03:4B:6D:5C:85:82:12:3B:EE:8D:B3
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:51:9b:83:2a:13:98:d1:08:52:f8:f5:1c:dc:46:ac:96:ac:
b2:2b:1d:8a:99:d2:33:08:85:6c:3d:57:f8:f3:45:61:a6:ff:
3e:fa:3a:df:a0:62:30:2a:d2:86:98:ed:6c:79:dd:ae:95:f2:
c7:d7:fa:c1:e7:33:13:f3:d6:ad:cb:2f:08:6e:55:19:cc:68:
d5:49:35:40:5d:2a:91:92:a8:46:06:d3:1c:7f:1a:60:db:48:
19:ba:94:f2:e2:7b:53:67:6f:ee:c5:55:81:af:89:6e:5a:65:
9e:53:e2:66:17:98:d2:5b:8d:30:c1:a3:4a:9b:a5:1a:0e:5e:
c2:a3:0b:df:d0:aa:65:21:bf:13:b7:00:6b:77:95:f4:d5:5c:
38:a3:68:af:43:ae:1b:6e:61:dc:66:07:78:83:44:90:ee:45:
88:a0:2b:9a:93:fd:29:97:8a:90:48:fe:9a:77:7a:4f:d4:79:
f7:0a:ac:8d:b3:75:f4:07:8b:0a:c0:fa:34:b5:fc:82:6e:5a:
67:31:10:f9:e4:04:e1:c4:46:4d:ea:5c:aa:2e:a4:5d:85:a5:
eb:ec:5f:b8:71:4d:61:58:83:ef:d1:1c:f4:b7:4a:cd:05:8e:
ca:b8:b9:1a:62:cd:39:f7:03:05:d2:bb:6d:91:af:86:84:ba:
75:d5:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:37 2025 by rpki-client