Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: gH1olVLUH0BxU09b2vLJtElBuVN/+LHg0MYxezlfmGg=
Subject key identifier: E1:0A:35:41:A9:3F:91:0F:47:E8:1B:4C:FE:08:F4:B6:B3:A2:1C:C1
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 0197B6A21223830CA371450245F8F0E07CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0AC2
Signing time: Sat 28 Jun 2025 13:02:44 +0000
Manifest this update: Sat 28 Jun 2025 13:02:44 +0000
Manifest next update: Sun 29 Jun 2025 13:02:44 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: GKEA9n+8n6aQVYw3EWl53UEYD+ugsrUF8MgQrISILh0=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:12:23:83:0c:a3:71:45:02:45:f8:f0:e0:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Jun 28 13:02:44 2025 GMT
Not After : Jun 29 13:02:44 2025 GMT
Subject: CN=e10a3541a93f910f47e81b4cfe08f4b6b3a21cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:0d:1a:7c:16:ea:29:2a:7f:fa:71:f9:5e:
59:6f:84:36:9e:9c:85:38:41:f9:50:3b:b8:e1:7f:
57:18:eb:1c:65:df:09:1f:40:70:fd:aa:9f:09:8d:
3e:e5:6a:04:36:20:64:59:ff:1d:52:9e:e0:13:1e:
f0:48:c1:23:8f:8a:52:df:94:4f:76:ae:82:0d:9b:
69:ef:b1:48:d8:d1:a4:4b:af:de:d8:7f:21:cf:d3:
db:8a:b1:25:04:9a:7e:1b:69:22:5c:0a:53:ab:5c:
86:2a:3f:97:97:ec:a3:d0:11:9f:64:b4:5d:14:6c:
3c:a6:31:b3:be:8a:77:b1:20:5c:ae:f8:fe:74:e5:
dc:b4:7b:b7:95:1e:b5:d1:ad:03:1a:2a:0a:aa:3c:
ab:55:cc:ce:48:73:e4:fc:99:7c:87:cc:ca:e9:c8:
35:38:6c:fa:15:d2:17:81:c4:21:93:9f:58:0e:72:
12:8b:52:dd:c8:95:2c:ae:d5:ad:6a:c5:63:ed:cc:
0c:76:55:53:d0:7e:1b:99:6c:12:c3:4e:ef:1c:71:
f5:9f:00:f6:b4:10:40:24:03:fa:51:8b:0d:fa:7a:
e3:7d:11:38:12:c9:38:de:08:28:66:d5:c7:0b:39:
9b:c4:9e:22:9d:d0:5e:16:b7:7c:3c:d9:f0:6a:bb:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:35:41:A9:3F:91:0F:47:E8:1B:4C:FE:08:F4:B6:B3:A2:1C:C1
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5d:b2:70:5e:99:f8:1b:61:21:12:ab:00:d0:0b:a5:ce:06:
e2:80:e9:a5:f9:31:75:be:e6:11:08:5a:c5:e4:be:11:fc:cb:
68:b2:76:1d:11:cc:57:94:a6:4d:0b:c3:f7:d7:76:8d:7f:08:
70:32:b8:63:4b:4e:a4:54:4a:fc:f8:74:24:aa:ad:5d:e3:3b:
f1:11:f0:ab:1f:51:26:cb:2a:ac:f5:54:7c:3f:e0:a6:ae:63:
97:88:4e:b7:96:33:57:29:aa:2d:c7:c9:39:02:a3:8a:ed:da:
d8:e7:bc:8b:05:ec:7d:b9:d1:5b:b1:8b:9e:b7:dd:d3:b5:d3:
48:c8:6a:3d:c5:2b:cd:73:21:fd:df:ef:16:c0:d8:62:00:dd:
a5:07:cb:46:50:80:7e:fc:01:a8:b6:6e:8c:e3:30:a4:03:1d:
13:90:c5:b2:73:51:f5:b4:d5:dd:81:0a:60:25:0b:6d:36:50:
45:66:84:d1:9a:00:3d:41:a6:98:1f:b8:d4:87:41:5e:2a:4f:
96:9c:fd:e1:7f:65:2c:b6:3a:96:23:e4:77:ff:16:7c:18:f3:
28:e1:74:ef:9e:e5:4d:09:55:97:a2:28:33:18:e0:15:67:6c:
f5:03:63:ce:32:7b:c5:3f:21:f3:d9:3f:4c:12:26:37:04:8e:
8b:be:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:21 2025 by rpki-client