Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: xWrAxcnskV4L2Tl3mSQd3vFGI7INhwYxSk77nyv8yMA=
Subject key identifier: A6:3B:B4:76:7D:F4:3F:37:4F:02:60:95:BE:D5:AE:9F:F0:4C:5A:5E
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 0197B9338009E4E49B135F8F5CA0DAF5F52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 0FCC
Signing time: Sun 29 Jun 2025 01:00:49 +0000
Manifest this update: Sun 29 Jun 2025 01:00:49 +0000
Manifest next update: Mon 30 Jun 2025 01:00:49 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: AmWMBALvFPCIlrq67GspzLNztf/U2s+uWXZcsX3izpw=)
2: a7DppR8a_zPl6np7nOEfJXryakA.roa (hash: wU3AghxluRA4zWm18LLUP4eLKYWVDAXfgoTV1mFNROs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:80:09:e4:e4:9b:13:5f:8f:5c:a0:da:f5:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Jun 29 01:00:49 2025 GMT
Not After : Jun 30 01:00:49 2025 GMT
Subject: CN=a63bb4767df43f374f026095bed5ae9ff04c5a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:ac:f0:95:69:1b:4a:e9:a1:65:ca:68:55:
a8:0f:08:c2:76:24:49:3b:7f:07:b7:71:86:14:36:
9c:c4:2a:7b:68:d2:04:65:e8:b2:98:6c:3a:b4:9a:
e3:51:f8:c8:8f:37:c4:6d:63:64:6c:d0:8f:10:a9:
28:46:54:41:01:55:ec:fd:65:20:1c:0e:05:53:0a:
54:85:af:55:bb:e7:fd:49:fc:c4:8f:80:6b:ab:55:
94:f7:f1:2a:83:bb:5e:78:b8:18:eb:d8:9b:56:da:
d8:bb:c2:8b:3b:e8:9e:e2:9f:8f:a4:7f:3e:e9:19:
b3:73:1d:f0:39:ef:1f:7e:90:4c:b4:cf:f8:e4:09:
8b:16:92:c6:e2:b7:3d:01:c1:97:1c:2c:e0:94:0f:
52:78:43:ff:87:19:bf:66:af:b1:44:1f:ab:b9:a4:
2c:1e:86:0f:5e:fb:57:1a:36:52:50:8e:fa:04:e6:
e1:54:de:ed:fd:b6:63:47:9f:92:b5:55:a6:17:b5:
5c:fa:c8:01:6c:7c:cc:15:d9:02:37:e8:13:04:2d:
9b:32:f3:e9:79:d3:bd:e9:b4:c0:23:7f:6d:d3:13:
80:51:a7:c5:e1:c8:b4:27:54:6f:fd:a3:dc:e6:66:
39:ca:10:09:f4:ea:82:9f:8b:07:16:8b:04:18:3d:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:B4:76:7D:F4:3F:37:4F:02:60:95:BE:D5:AE:9F:F0:4C:5A:5E
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:bf:e9:75:ad:c2:01:3f:3c:83:b5:99:d6:5d:9f:32:99:
b3:43:79:e8:a4:65:62:cd:2d:40:8d:af:66:d8:e9:a6:0f:00:
d7:1a:01:41:d6:c6:91:0a:7a:a9:9d:76:de:6a:c9:5c:47:d4:
b5:3b:c0:09:2a:fc:c3:43:50:34:12:2d:c8:4e:84:f5:10:e4:
58:d4:10:f5:d8:70:d8:64:dc:07:fb:59:eb:93:69:e7:37:a9:
d5:d0:68:2a:b7:d1:40:58:6f:54:dd:64:fe:03:b6:fc:1e:21:
ae:c7:95:f1:7d:5d:20:fb:2f:be:02:4d:6d:73:7a:9e:07:d8:
28:a9:7a:3e:10:9c:3c:07:28:e4:a0:47:b0:da:c8:0d:0a:a4:
63:ac:b2:34:03:f5:e3:a8:2e:ca:de:e2:a4:87:f5:4e:a3:5c:
63:ac:88:91:74:7d:f6:ff:bb:80:1e:db:85:36:50:d2:14:65:
fe:66:13:81:38:b7:ee:4b:1a:a0:f3:47:7f:62:74:ba:b2:87:
fc:b3:66:4c:e5:89:b4:11:d2:2d:40:23:bb:09:c3:1a:49:41:
7c:41:86:24:e6:36:c7:6e:b8:34:89:82:1f:f3:6d:1a:91:3c:
99:a7:22:3d:a4:16:6d:6b:86:ba:f5:0c:a0:6f:5c:c8:d9:61:
ee:44:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:52 2025 by rpki-client