Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: B4mlMGn8exAA1sHG4aOOQnDwhqx4nvcTzb4hvhQsQHw=
Subject key identifier: 1C:C6:A2:13:09:27:74:ED:22:25:EB:C2:4C:6F:C1:9D:C1:DF:D4:CC
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 0197B93425C8958C02F6A8B9DCA68CFDB0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0C44
Signing time: Sun 29 Jun 2025 01:01:31 +0000
Manifest this update: Sun 29 Jun 2025 01:01:31 +0000
Manifest next update: Mon 30 Jun 2025 01:01:31 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: r/8IB6CQXE9QNXSrXKVwROSEpA2k6qG/gppozUyC9YE=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:25:c8:95:8c:02:f6:a8:b9:dc:a6:8c:fd:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jun 29 01:01:31 2025 GMT
Not After : Jun 30 01:01:31 2025 GMT
Subject: CN=1cc6a213092774ed2225ebc24c6fc19dc1dfd4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:c7:b5:b9:1a:63:57:f9:5f:27:77:ad:00:
a2:25:b4:d6:b4:20:c6:59:06:d1:88:c5:84:5c:c6:
98:5e:42:1e:3f:00:d3:40:bb:b0:17:82:55:aa:b8:
96:62:f7:b8:4f:b0:92:68:a7:cb:49:6f:db:64:7f:
c4:1d:af:b7:6e:bd:2f:12:90:b0:30:0c:6e:4e:55:
de:d8:bd:87:bf:54:11:a9:c9:0a:a3:e6:b8:7c:86:
0f:05:de:7b:1e:3e:4f:bf:20:75:b6:f5:39:8b:25:
54:d6:d3:94:ab:5b:26:e7:48:f4:67:ed:93:11:44:
b0:ab:2b:7e:e5:63:b4:9f:c6:a1:8c:ab:23:5c:73:
0a:47:dd:e3:b1:b2:cf:45:77:64:e8:af:d5:83:ab:
82:4e:6d:ee:c3:ca:bf:48:26:c4:6d:46:ea:1d:7b:
4e:8b:5a:2e:46:54:3e:32:df:c5:4e:55:ac:54:82:
dd:8f:2a:14:8a:2c:ca:b5:09:9f:4e:0a:d4:ce:07:
b8:88:a6:36:7f:89:f8:47:28:00:20:81:07:38:c0:
92:68:31:50:42:ca:83:e5:c3:e4:a0:a1:2d:64:b8:
4b:04:b1:c9:78:8e:ec:33:84:5b:43:fd:90:f1:85:
9d:7c:d6:0e:02:cf:83:74:f9:66:14:c3:03:2f:9b:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:A2:13:09:27:74:ED:22:25:EB:C2:4C:6F:C1:9D:C1:DF:D4:CC
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6d:2d:37:29:8f:31:78:41:b9:38:76:fd:09:e2:2a:fc:1b:
2c:e1:2c:65:ae:6b:8b:bb:e4:9a:e6:45:b4:1f:07:f2:67:ce:
ac:eb:84:8e:a3:22:f8:16:05:16:00:b1:5e:a2:8f:95:fa:44:
a5:f5:a4:a1:c9:dc:8f:12:b7:eb:85:92:30:82:91:3d:ad:ba:
e6:18:ec:3d:0b:af:8b:67:c1:84:bd:14:aa:1f:1d:49:61:4b:
42:5e:26:21:1b:d2:37:18:10:72:0a:3d:68:03:c7:00:9a:8c:
21:85:a8:bf:bf:26:31:44:e4:eb:53:60:ce:d6:0b:25:70:25:
eb:cd:b0:65:a8:42:4a:f9:63:9d:11:2b:56:25:5c:c6:e2:76:
76:5b:03:0c:8f:41:83:61:e1:67:fe:a3:4e:60:0f:14:3a:2a:
15:97:54:9f:dd:41:d2:92:2a:71:84:1d:a2:de:bf:e5:47:9c:
da:09:b1:89:a5:5c:49:ba:07:83:00:d9:63:77:6e:7b:a8:e3:
0a:85:70:2b:84:40:fb:c2:8b:35:4d:78:1a:62:48:db:b7:f7:
ca:f7:c5:86:34:60:6a:c1:12:e4:8f:cd:30:67:63:12:ed:da:
1b:1d:bf:6b:6b:09:74:e6:67:2d:36:71:88:5a:48:46:47:fc:
5e:b1:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:08 2025 by rpki-client