Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: XPZkBPLPkdnbvuGSWRPRGSXo5e5JlcANL8dNXOA3KsM=
Subject key identifier: 14:4F:A7:5A:76:AD:C6:52:A5:74:8C:6B:45:A9:67:3C:6E:4E:A8:C8
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 0197B74521FE67550DDFCE195E7A9801D9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: yMOeww29BOSY+scqcZWYbcv2aPe8EE4zSD6GBohZZBY=)
2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:21:fe:67:55:0d:df:ce:19:5e:7a:98:01:d9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=144fa75a76adc652a5748c6b45a9673c6e4ea8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:15:60:e5:c2:6a:31:b0:1d:79:9e:23:d0:
f1:a2:f5:9e:8c:bb:ce:35:f3:56:d5:ab:f8:19:db:
fd:b7:be:91:b0:40:c2:17:ef:1c:ac:12:6f:24:8e:
34:43:3d:6a:8f:a7:8a:61:f4:ad:24:03:55:bf:02:
3e:60:c2:65:7c:5a:94:a3:4c:b5:86:0d:6c:f2:20:
05:73:f0:64:cf:74:76:e0:16:1d:82:d6:2b:b0:34:
49:3b:d0:5e:62:29:d6:c7:75:10:26:96:74:e2:90:
3f:d2:b9:32:f3:39:4f:76:2c:83:cd:99:9a:aa:65:
9c:82:94:d2:cd:a0:b5:71:4c:8f:42:fd:9e:ee:b7:
8e:ec:c5:fb:49:e0:24:14:ac:ac:0b:40:10:60:c8:
ac:18:45:58:94:36:e8:9e:ae:c2:68:26:19:b5:c1:
e0:9a:24:64:6f:a4:69:4c:a1:cd:89:33:e1:cf:ec:
9d:5a:4e:7f:22:ee:e9:ca:de:ce:42:8d:91:d7:36:
94:e5:e1:83:fe:2f:47:8e:df:a1:74:a0:93:c7:0f:
84:fc:27:fe:39:fa:c7:b6:5a:77:5f:25:cf:4d:04:
a6:d7:86:6b:e2:d1:60:78:ac:c5:1d:b1:94:3a:04:
da:5c:11:ee:2a:54:cc:4c:18:dd:d7:78:46:70:7d:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:A7:5A:76:AD:C6:52:A5:74:8C:6B:45:A9:67:3C:6E:4E:A8:C8
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c7:ec:92:cc:1f:6f:75:1d:46:59:6f:57:a9:63:0f:99:6e:
ab:d5:a8:b9:54:64:08:ac:7b:da:37:63:06:c2:3d:0b:3a:84:
26:e1:0e:b6:62:10:6f:04:b4:ed:f0:88:2d:ac:ac:99:ae:0a:
92:83:da:78:aa:7b:91:1a:61:ee:fe:48:0f:5d:d2:67:4c:7c:
f2:bd:63:40:d7:e6:6f:45:6d:ed:37:0a:0b:bd:c2:f2:fa:7e:
95:d7:89:fa:74:4d:55:66:61:98:91:53:76:09:63:9e:88:d1:
4c:4d:29:de:ab:21:52:c2:69:97:c9:bd:8d:61:a2:32:28:30:
04:7c:b2:3e:33:da:76:4e:6a:f9:21:e1:60:3d:d6:ea:23:e5:
c7:78:9e:9f:12:9d:b8:e0:c6:74:cb:4d:20:85:ad:29:aa:31:
ca:87:4a:62:dc:47:18:24:24:dd:d5:a5:8a:15:51:a0:23:49:
58:ea:08:b6:0c:39:04:87:57:68:b6:a6:dd:11:56:eb:d7:b4:
0d:aa:67:c1:8e:df:8d:b9:f5:31:7b:7d:55:ee:d9:9a:d1:9a:
4d:08:e3:99:05:10:c4:ca:1c:ef:ce:c2:be:67:20:8c:58:5c:
a1:5f:00:b5:73:5e:85:29:9e:57:f1:8b:6e:67:27:0d:9b:95:
66:d3:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:46 2025 by rpki-client