Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: UK+Jk7Jf9TCXuiRqlcEzOSpV2wUKE8HeijEWP6ECKRA=
Subject key identifier: 35:BA:FA:81:7C:57:03:3E:7A:D6:42:19:5F:A9:E4:EC:B6:81:45:6B
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 0197B745AE26CD76CFA6DABCC8A4647AE2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0440
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: RJK4RhBjYJt/IXl6BEuChZ/ohiUgzjc/ExHWrpBrJEM=)
2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=)
3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=)
4: ducUWn7SmjDXSD2XK_HAZ4X-w1E.roa (hash: QsOlqkwJkHZw/RVRRDiq/I4YTQ51hDfHFRswj0zjjww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ae:26:cd:76:cf:a6:da:bc:c8:a4:64:7a:e2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=35bafa817c57033e7ad642195fa9e4ecb681456b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:ed:2e:80:19:86:cc:07:a9:d7:d6:80:6c:
3f:76:2b:f9:b5:8b:ab:d8:ce:26:4d:21:6e:9a:32:
04:06:de:17:0c:b6:93:ef:f6:4d:a7:c8:f3:e4:c1:
ad:ce:0b:c9:a4:f0:69:10:de:09:da:ec:18:1c:e8:
c8:91:1c:f7:86:ee:04:5a:0e:41:04:98:d2:84:e7:
b7:85:74:60:fc:21:04:c0:79:4c:87:24:c2:c9:b8:
04:56:12:c0:9e:33:67:ec:af:a0:b6:83:5a:5e:42:
e2:93:8d:e3:65:2b:fc:c5:bf:0b:c8:65:ad:fc:a2:
6e:d2:16:c3:b3:ef:36:c7:4c:b0:76:0e:23:81:d8:
06:77:7f:38:e6:c5:19:ec:05:e2:6d:c3:cb:8b:7e:
cb:aa:04:32:97:39:80:a8:90:20:0a:0b:b7:0a:22:
e1:f1:1c:18:71:3a:93:51:b0:47:c4:c7:00:2f:3c:
51:bd:18:c0:c7:f7:f5:da:38:29:b6:61:0f:3a:dd:
af:0c:5a:19:ed:d8:24:5c:72:aa:8b:a5:47:44:ea:
7a:e8:28:dd:43:93:70:f4:75:05:f1:14:6e:88:e5:
47:fd:1e:db:c7:7f:0d:0c:96:77:db:48:18:12:cd:
1c:43:dd:df:d1:62:95:39:94:17:b4:d5:55:c0:a3:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:FA:81:7C:57:03:3E:7A:D6:42:19:5F:A9:E4:EC:B6:81:45:6B
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:6f:45:b6:94:f0:24:f6:ef:de:e6:97:09:19:9b:41:22:
6c:25:76:06:eb:63:1b:11:ba:18:2d:e3:2f:31:37:e1:0b:ae:
a0:6e:a7:a6:ce:f2:f2:ab:59:89:db:36:4e:4e:e3:bd:0a:53:
3b:2c:98:0c:15:ad:32:c6:d7:36:e2:d8:c7:2a:7a:9c:74:e2:
83:de:21:01:1a:4e:1b:b4:c1:cb:74:cb:42:5b:ae:97:f1:fc:
9d:c2:7a:3c:ee:0e:b9:e2:94:96:2f:24:e9:24:e9:29:a0:04:
67:da:3b:29:95:44:f9:9f:98:ff:67:77:00:64:ce:17:c5:bf:
8d:c2:08:f6:d9:da:1f:3a:09:ec:1d:e3:77:e6:7a:05:83:10:
3d:ea:c7:1c:4c:27:61:99:a0:07:1a:96:04:c8:87:9f:90:cc:
bc:2f:2c:34:92:82:aa:ae:90:49:aa:ef:22:54:87:fd:b0:eb:
33:1e:57:de:df:88:11:f5:6d:1e:f9:ea:05:b0:af:cb:9e:bf:
ca:b3:04:a0:5e:91:23:9f:bf:ad:6b:13:cc:4c:bb:14:24:1a:
16:e2:92:cb:64:fd:6c:79:81:8b:c3:66:db:02:ec:e9:53:ad:
64:c9:e6:c1:cb:58:b2:8a:e6:00:29:dc:ae:f2:7d:63:ad:8c:
61:2b:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:12 2025 by rpki-client