Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: desJJVh9PaUBgUJRU1fsX3jWuvWgahdYsrhhpDM48Jw=
Subject key identifier: C0:93:AC:80:36:A4:EA:FF:0B:49:18:18:02:23:B3:97:04:FE:60:3B
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 0197B6D79F781039275CCAE4BB95C1462FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 14F6
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: P2Kt1UQGKtMjIJg9Wm9BprQdS0CBUQabR9Z1F6xmPbk=)
2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9f:78:10:39:27:5c:ca:e4:bb:95:c1:46:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=c093ac8036a4eaff0b4918180223b39704fe603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7d:d6:ba:92:d2:bb:91:90:ad:1b:65:df:6c:
a2:e9:93:78:45:12:72:3e:97:9a:d3:c5:b1:7c:e5:
2c:a8:a4:a2:51:96:55:ab:29:1a:53:6c:b1:02:aa:
ef:fc:1c:59:df:40:3d:32:f5:70:c4:05:b5:41:e2:
a5:4e:e8:01:bc:fc:ff:9b:20:c6:c7:f6:63:e4:b6:
2f:85:b2:2b:f3:57:43:1d:18:ce:6f:de:d2:13:4a:
71:70:6a:e0:ef:24:48:9d:ac:6a:7d:94:45:db:a4:
92:c5:37:fc:42:14:9f:7e:b9:92:47:bd:19:39:c9:
65:ec:e3:7f:60:7c:14:64:1f:2c:47:bf:87:bd:2d:
79:02:0a:ee:eb:10:db:df:44:a5:f8:03:ad:30:9a:
81:a8:9b:0e:fa:d3:d3:cb:1c:7f:33:bf:b0:1e:08:
9b:39:77:d6:9a:75:7b:5f:73:9c:18:52:fd:e9:6e:
d0:85:22:ef:95:4d:c7:9a:40:81:c7:5a:8e:56:ce:
03:ba:9a:02:43:44:5a:8f:f8:74:65:fb:36:07:f3:
43:04:1b:e9:6b:78:ff:6a:77:3e:93:3c:e4:c3:fa:
42:c9:6f:20:93:bc:1f:a2:3f:0a:6f:39:2b:2d:3f:
5e:6d:6c:19:43:53:33:e0:f6:c3:0f:4b:11:d4:06:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:AC:80:36:A4:EA:FF:0B:49:18:18:02:23:B3:97:04:FE:60:3B
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:cd:f6:79:4e:1f:c2:d6:db:5a:3b:0a:c5:cd:69:cc:16:
53:f4:f3:45:93:62:dc:ff:38:bb:d0:a7:cd:c4:ff:40:f6:e7:
f3:a5:f7:3e:46:86:6e:99:c2:08:7e:d8:dc:c6:a3:0a:32:b3:
81:21:20:d6:83:92:bf:80:7a:8b:47:e0:31:68:64:ae:c7:de:
ea:f0:be:71:8e:a3:18:2e:af:16:01:5e:26:3f:50:53:4d:f7:
ee:26:8f:8e:48:ed:a3:02:47:35:ca:8a:0b:e8:bc:e2:38:a6:
a5:86:09:35:36:3b:7b:98:1d:a6:f8:91:b4:98:4e:11:81:e6:
1e:c8:d1:6d:3b:f0:2f:ff:af:45:16:b5:fb:ee:1f:2f:ff:94:
8b:78:57:38:e7:3b:28:1d:02:76:9f:b6:82:88:ae:dd:66:bb:
a0:56:71:e0:d7:1a:27:7f:ba:7c:fb:c3:78:0a:f0:f1:f5:74:
ee:fc:77:d8:64:31:af:3b:d9:70:41:ba:f6:e4:d2:58:a8:06:
a7:ba:83:08:f9:91:3f:df:e5:d1:49:f4:31:71:12:36:e4:c8:
04:33:e2:fe:01:86:63:42:10:74:5e:e2:64:a7:8c:5d:80:78:
ae:17:55:35:db:e0:ba:8f:4c:79:49:d7:ab:2d:ad:8d:96:c1:
b0:c1:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:52 2025 by rpki-client