Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: 15gRIB99QhH7BLrP4jkD9DLre6wNwodbhRjZLLBTzZE=
Subject key identifier: E7:A8:3B:99:EA:EC:B8:52:F7:BB:A6:B9:CE:36:36:22:0E:17:C6:9A
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 0197B6A0CC26231B07EC3A32751417129CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 0F08
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=)
2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: DE+dV6QDheHImhimn5K38/o/Uklfb0rQTqRX1y9DV0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cc:26:23:1b:07:ec:3a:32:75:14:17:12:9c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=e7a83b99eaecb852f7bba6b9ce3636220e17c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:30:81:9a:c9:04:e8:d5:13:e3:d5:34:f2:
37:e2:9b:d9:e4:5c:6f:77:e9:6b:b2:4c:c5:de:72:
7d:fa:03:56:c6:75:70:bc:56:25:e0:6a:c8:b5:df:
83:93:ef:d0:d4:15:bb:5c:10:7d:81:a3:de:4f:62:
bc:36:78:d5:03:02:a8:76:c9:a2:6e:06:e5:95:08:
69:51:95:55:bc:a5:1f:76:d2:75:f8:ba:a7:0c:ef:
db:0e:41:0a:b2:71:14:24:19:45:b1:a2:7f:fc:84:
af:ed:5c:0c:3d:75:80:26:bf:da:0b:a5:31:71:64:
f0:c4:f3:44:bb:59:ca:a5:a0:0f:ed:e9:03:08:3f:
66:d4:ea:4e:4e:2f:64:b8:92:60:0d:6d:dc:42:a0:
bc:7b:47:87:9a:40:01:fa:d7:1a:a2:21:31:34:cf:
1a:76:27:50:55:ad:ba:5e:1f:61:8f:12:47:b6:69:
f6:47:27:6d:3f:b1:06:99:b1:83:2f:e2:3f:5a:ef:
77:52:6e:be:4f:10:97:a0:6e:03:f3:28:56:12:3a:
0d:8f:51:3c:09:b1:3c:22:70:05:58:2b:ea:31:4c:
46:47:a0:6a:50:d3:bd:12:5a:a7:80:1a:9b:90:29:
bb:8c:e8:e6:6c:83:ec:97:6d:47:c3:ed:a1:ec:8f:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A8:3B:99:EA:EC:B8:52:F7:BB:A6:B9:CE:36:36:22:0E:17:C6:9A
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:fe:d5:07:d3:21:4a:04:88:15:8c:ab:35:9f:45:15:df:
ed:18:d0:71:dc:64:d7:82:e3:6f:e9:a7:14:a2:24:aa:7f:3b:
98:0e:6b:5a:13:55:aa:99:34:da:16:a6:c9:a3:07:f0:0f:b1:
39:15:8e:a3:6b:a6:d4:c8:53:1f:4d:1b:95:e7:55:e7:aa:13:
21:10:f8:db:00:ec:f6:d7:f3:8c:5f:80:d4:bc:3b:e2:33:40:
eb:51:69:19:d6:43:85:9f:f1:4f:1d:fa:a3:0c:0a:b3:50:06:
02:23:30:b3:7a:04:3a:39:1b:73:ec:96:be:32:39:ab:1e:5b:
b0:1e:e9:41:0b:84:85:92:0e:c8:27:30:10:43:a1:24:4e:9e:
10:36:7a:58:8a:2a:34:27:a8:39:9f:68:c5:bc:2c:74:73:a5:
ca:5e:9e:4f:54:20:6f:66:51:b5:80:a7:c0:5c:4f:f6:f8:e3:
9f:d2:aa:15:8f:ff:93:12:70:bd:3e:ed:4f:a4:b0:b8:16:95:
9f:0b:ef:c5:4d:0b:dc:f4:3e:c9:13:ac:97:87:7f:f3:42:2e:
99:0a:e5:c3:d0:75:25:50:49:54:ef:35:c8:4a:4b:f0:91:49:
39:64:88:54:d5:62:ec:47:03:f6:4c:b1:1f:e9:08:bf:89:2c:
54:b4:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:17 2025 by rpki-client