Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: kMoBbpK683LO8R4yVUZp99+gvC2/eWJVXbxVDK8QIt0=
Subject key identifier: 01:4D:8F:4C:14:50:D5:10:1C:47:48:37:CC:0A:FC:C5:C9:50:CD:1D
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 0197B77C35C3F641C9262D3E2B3C3FDBB9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 03EA
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: OYPy4mQKFKh22lvG/JNoEy9B4G9uwSNG39ySLFwtOE4=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:35:c3:f6:41:c9:26:2d:3e:2b:3c:3f:db:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=014d8f4c1450d5101c474837cc0afcc5c950cd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:36:01:16:10:7d:2d:5a:01:59:95:cd:e7:
ba:b7:25:3e:e2:55:40:4c:e7:3f:3c:4d:c9:85:b9:
bd:c9:93:e8:11:2c:f3:d4:a4:39:b5:f2:da:2d:6f:
5b:f1:bb:f8:5c:43:a1:0c:67:5a:cb:e2:6f:74:39:
16:ed:05:19:7e:de:9a:2e:83:92:92:71:21:01:58:
f0:4d:34:e8:aa:db:e4:3e:13:b6:c0:af:3f:18:12:
60:5a:21:91:25:4d:f7:93:2a:21:3f:80:ce:8c:cc:
d1:51:e6:ff:27:b2:a2:4f:46:d8:b7:21:86:2b:9e:
0e:71:cf:b9:4e:e1:26:4d:65:4f:a5:a0:c8:a7:de:
22:73:8f:4a:35:56:cc:59:bd:28:be:65:26:83:f5:
54:4f:11:0a:96:5b:ec:1d:43:1a:fd:33:14:fe:1f:
46:da:56:6f:80:19:b6:68:26:6c:58:15:b4:eb:ed:
c0:4c:6b:1b:d4:a8:68:86:67:5e:12:37:68:88:33:
1d:c0:bf:1b:a2:42:68:9d:dc:21:16:2b:eb:b9:45:
1c:1a:ba:9c:78:5b:e7:99:7d:84:60:d1:c2:2f:4e:
51:6b:07:ae:c8:ec:fa:e7:07:5b:a9:eb:ce:c7:77:
02:d3:32:36:27:3c:80:06:fa:71:1b:a0:5b:f7:0b:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:8F:4C:14:50:D5:10:1C:47:48:37:CC:0A:FC:C5:C9:50:CD:1D
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e2:3d:63:8d:27:af:03:b6:25:ab:71:5b:4c:87:8f:8d:b8:
a2:02:ad:55:05:77:70:6c:3c:1e:33:5f:11:fc:ee:00:32:cb:
15:ae:0c:49:87:bf:be:e1:d4:22:b4:2a:96:06:e3:14:ea:6d:
d3:1e:8d:0d:d9:95:eb:d7:95:be:eb:fe:5b:40:54:c6:f6:d0:
41:75:d0:be:19:42:43:9f:ed:8e:82:dc:df:30:76:b3:a3:31:
fa:f4:8e:11:c3:d2:06:07:1f:38:94:d6:2c:c8:cc:d1:38:7b:
cf:bb:0d:8b:7d:a0:d0:0e:d3:6d:d3:c1:e2:95:ee:9a:c0:1e:
55:77:f0:ca:4b:1f:98:52:fa:00:67:ca:d8:9a:50:67:8b:d5:
c8:bf:1e:f9:12:c4:db:56:d7:71:99:b1:9b:49:e4:75:12:ef:
56:c5:31:de:b6:21:d3:e6:f5:18:31:84:58:e3:cf:73:38:88:
4f:da:b7:a6:f9:62:14:f6:d1:3d:c2:c5:c5:6c:f6:16:7c:61:
1c:f6:89:b1:c1:d5:ce:e9:27:8f:e9:e8:ae:b8:da:a9:e5:32:
b3:22:df:b5:2f:56:31:44:67:b3:85:c3:45:2d:57:0a:a6:0f:
38:3d:43:3a:a9:33:2b:e6:b9:11:b2:ae:0c:f3:2b:da:fc:71:
88:41:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:49 2025 by rpki-client