Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: 5fHCET5GCv4bMhPzsLvHlaFmLpJouJ096iNb9xVkw6M=
Subject key identifier: 80:03:B7:7A:48:83:14:B6:5A:31:76:9E:F1:51:F6:91:30:E0:7C:55
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 0197B77C39ED1D1F1F36A1E462FA5B0A2F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 044E
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: EWa6/3UyCLvUtCABpVPwIyVip5xM/qsbFNUdy/hgjAU=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:39:ed:1d:1f:1f:36:a1:e4:62:fa:5b:0a:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=8003b77a488314b65a31769ef151f69130e07c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:40:ca:61:f2:24:91:d6:a3:da:93:ec:9e:
fe:6d:40:ea:1d:4d:74:0c:92:1b:fb:48:f9:33:b2:
f6:8d:e2:2b:86:24:eb:bb:83:f5:9c:65:60:5f:6f:
e7:71:e2:90:aa:dc:1a:2a:cf:fb:87:21:b2:95:ec:
e1:2c:97:ee:66:e8:7a:bc:68:73:4d:0d:4f:56:95:
44:3f:7f:96:ef:9f:4c:54:c7:78:ee:13:b9:16:d7:
c5:5b:b9:10:7d:e8:a5:00:6e:11:63:12:e6:4c:cf:
3d:4c:cc:6b:9e:3f:04:54:1c:b1:9a:f1:46:37:30:
67:93:86:2f:3b:10:62:dc:5b:95:af:36:55:02:13:
43:bb:31:55:b4:35:e1:f3:23:a2:7a:4e:00:7b:b6:
d0:44:36:60:e9:94:6a:51:a0:b4:44:7f:eb:19:7e:
df:37:70:d2:a9:d1:95:07:07:37:17:f8:ab:0b:6b:
81:bb:07:62:c1:59:19:08:da:e2:8c:84:38:bb:8c:
41:ae:6e:4c:76:69:f3:94:b0:bf:22:bb:27:cc:8e:
1a:1b:e9:7f:99:a8:fa:7c:7e:72:c0:c0:d3:61:9c:
fe:a8:f2:7d:7f:54:ae:66:30:1a:94:fc:90:8e:35:
ed:5f:c4:09:51:33:bd:00:95:3d:18:3c:0e:a1:da:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:B7:7A:48:83:14:B6:5A:31:76:9E:F1:51:F6:91:30:E0:7C:55
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:13:fc:db:2f:78:2b:99:f7:c1:bf:51:ef:fc:0d:50:4f:17:
44:e9:0c:e2:23:d8:d8:4f:ab:5d:59:cb:47:5b:aa:c1:09:30:
21:46:ae:b5:e6:6c:5f:27:ab:d0:e4:96:8a:47:6d:1a:15:71:
51:20:51:e3:d7:01:bb:cf:ac:f0:f7:98:6b:61:8c:aa:68:c4:
aa:42:2f:bc:97:e8:27:1c:a2:1c:d0:fc:e6:4b:7f:08:5d:99:
b3:39:fa:42:a9:f2:f7:3e:f9:a0:16:30:4c:99:49:72:84:da:
a3:54:6f:4e:bd:a5:24:f0:ad:0a:22:87:da:7a:8e:a4:3e:72:
c1:59:8e:e9:05:f6:9f:9f:cf:1c:87:77:1c:0a:42:10:94:93:
7d:d6:e4:2c:97:84:47:65:3d:78:cc:2f:de:1e:31:1e:da:f1:
43:0a:de:18:89:24:2e:0f:46:31:5e:20:55:1a:ef:c4:e2:f2:
4c:84:67:94:92:5c:50:dd:6b:3d:5d:7c:f9:d8:6a:0c:88:cb:
71:f2:ad:b8:93:a2:f6:5a:11:bc:32:84:4a:14:a6:70:c0:08:
87:c8:7f:46:03:14:8a:46:c4:f5:8a:0f:2c:1a:5a:8b:5a:69:
89:61:b4:a5:31:7a:39:dd:47:45:63:d4:be:a9:48:e2:5e:de:
6e:9a:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:00:57 2025 by rpki-client