Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: kCYhARvrXhLdMUP2umrE+9BYs1uaYNqoDiSj9kba+jE=
Subject key identifier: 81:A3:8E:D5:3E:F9:EB:ED:3B:B1:65:AD:6C:08:A9:D0:E7:EA:F5:BC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0197B745AFD21515BDB0C5D430399C34D6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 117E
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: nENURkI7+ZwhdVcMNjPUdTRvsRhFCF+qsTY+u8v3uMU=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:af:d2:15:15:bd:b0:c5:d4:30:39:9c:34:d6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=81a38ed53ef9ebed3bb165ad6c08a9d0e7eaf5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:af:83:87:48:0a:83:c0:7d:12:00:45:ce:
93:a7:65:cb:ba:82:34:25:d3:4a:67:8f:8d:45:32:
4a:04:13:57:d6:e0:d5:af:23:81:ec:78:8b:23:3e:
66:67:dd:d1:35:05:96:2d:db:93:cf:5f:fb:d5:3d:
b9:91:91:cd:ab:66:e2:e8:c0:b5:57:16:72:ad:f8:
70:d1:5d:89:d6:71:bc:8b:07:18:83:66:2a:9d:0f:
16:a9:01:c0:63:e9:94:90:85:dd:7e:8f:87:6c:67:
b9:67:79:ab:30:c2:8b:5d:d8:42:bf:9c:3c:41:1b:
46:50:ae:0d:21:ae:56:ac:00:e5:9b:53:84:45:86:
9d:18:ee:a5:ae:33:c1:4b:31:40:44:4f:a1:d7:aa:
a4:2a:39:ef:31:c6:dd:50:cd:48:5f:1b:16:33:1a:
90:94:7e:f7:14:b1:4d:9d:6d:22:02:c0:a5:1a:08:
c4:2a:93:d2:93:aa:ed:30:fe:e4:41:18:2b:a7:2d:
9b:d1:7f:b3:4e:15:7a:59:ae:8b:a5:01:21:32:1d:
17:63:35:6e:08:cf:3e:02:63:0b:f7:a8:33:4b:b3:
5c:85:89:b9:37:ce:9b:31:6b:2f:76:64:89:77:a7:
ec:b1:fa:8f:6e:23:af:49:48:d4:44:34:74:61:b3:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A3:8E:D5:3E:F9:EB:ED:3B:B1:65:AD:6C:08:A9:D0:E7:EA:F5:BC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:20:c2:27:3c:da:e0:16:9e:28:fb:d6:8f:6b:ba:58:0f:
b1:94:49:1b:d0:cd:72:0b:a2:32:3b:21:a4:5c:c2:0d:83:69:
a3:00:3f:25:63:b4:40:49:70:90:37:ad:c8:a1:a2:87:42:7d:
30:8f:29:db:c0:f7:ca:ad:0d:41:fa:11:e0:8c:61:53:8f:e2:
ad:39:d9:d1:ca:39:d4:ce:ed:34:72:3f:af:c2:3a:13:85:71:
7a:3f:49:8c:4f:73:f5:14:15:cb:63:e3:1b:ef:db:81:1c:89:
c8:a9:e1:11:75:a7:9e:e6:5e:d2:66:cd:65:8c:be:1b:12:a0:
93:c3:89:c5:a1:6d:5b:9b:43:d5:0b:78:6d:3f:3f:14:2a:89:
26:2d:69:c5:d9:82:34:37:3e:72:30:50:dd:b4:8e:50:9f:18:
68:6c:a2:99:c6:ed:d2:4f:aa:28:1a:f9:f6:b7:af:ef:d9:4a:
9e:8f:7f:11:ff:f7:9c:b2:54:c8:70:8d:ac:49:53:01:88:dc:
13:90:5e:7c:99:8a:d1:40:b5:fb:13:69:f4:86:86:ce:74:5b:
60:9a:af:10:39:dd:c9:78:20:28:bb:f5:ce:96:8e:32:0f:a5:
2d:fc:a3:ad:c1:0a:f7:7c:96:d5:7f:2f:f7:c8:a7:a5:be:25:
b0:8f:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:54 2025 by rpki-client