Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier: mQuVylg1kJxg3UOIAyr3EU6N7Riwj1QSONxJ0usp0Ek=
Subject key identifier: 87:3C:90:C0:41:7F:87:80:50:92:3C:97:01:43:DD:3C:DA:6B:32:48
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 0197CFF2716511D34A3E59B95E2FF6FA414A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number: 13E8
Signing time: Thu 03 Jul 2025 11:01:01 +0000
Manifest this update: Thu 03 Jul 2025 11:01:01 +0000
Manifest next update: Fri 04 Jul 2025 11:01:01 +0000
Files and hashes: 1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: a35H6Z9d+Qzusr30pskvJMOQdLJB4OwV52hwmI1sq2Q=)
2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=)
3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=)
4: lwrL3dIIXO_mCBQdap7KZ_iDBFc.roa (hash: F6VpIkHy8PT/lwz9faa43UWmWxDgyYUpuXzG7yHnlKI=)
5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:f2:71:65:11:d3:4a:3e:59:b9:5e:2f:f6:fa:41:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jul 3 11:01:01 2025 GMT
Not After : Jul 4 11:01:01 2025 GMT
Subject: CN=873c90c0417f878050923c970143dd3cda6b3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:35:fc:74:6f:40:8e:cb:a0:29:aa:a3:68:
ff:17:3f:b2:06:a5:5c:a1:34:01:49:b1:42:61:22:
83:0c:54:7c:4b:da:cc:cd:95:78:bd:e8:a2:37:ac:
c2:40:e9:9f:59:60:09:59:81:58:13:ee:d5:45:37:
d0:eb:f3:d7:78:0d:0e:2d:31:97:07:d3:fa:fd:ba:
c2:43:a8:50:fc:6c:46:b5:0d:ab:b1:fc:40:9d:8e:
b1:0a:3e:97:c2:11:a8:d1:7f:17:45:0b:5c:48:f9:
2a:57:23:97:9d:c7:c6:fb:58:d5:db:7d:a9:3d:ff:
bc:e3:f0:0c:07:ae:65:ef:42:7e:5b:c1:c4:b4:17:
8f:3e:28:ba:fc:31:f5:9a:92:34:2f:d8:74:73:12:
14:1c:9a:2f:cc:ae:3d:34:77:ff:75:dc:04:07:33:
f9:c8:09:cf:a6:0f:25:8e:b1:b4:dd:96:3f:67:79:
c8:6b:4f:40:e4:af:e1:d9:cf:70:33:33:04:7c:67:
2a:06:d5:96:a7:a5:50:93:c1:d8:d1:0c:c5:44:8c:
67:68:01:e2:a3:a5:a7:5b:59:72:93:1d:09:b7:aa:
f4:e3:1a:1a:d9:1c:0e:59:16:13:be:1f:62:57:17:
eb:34:f0:6a:b3:2c:40:31:c5:71:8f:49:bf:ba:04:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:90:C0:41:7F:87:80:50:92:3C:97:01:43:DD:3C:DA:6B:32:48
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5a:24:b4:2a:35:d1:a5:d9:c4:5b:0c:5e:b1:c4:d8:e3:5c:
3f:70:f7:a5:38:1f:47:df:4c:38:d0:1a:30:0a:5c:63:a3:54:
52:67:3b:cf:5e:14:ff:7e:4b:3e:65:0f:df:d4:ac:f5:cf:40:
8c:a9:c8:0d:b7:16:0b:a9:74:cf:e6:3c:63:1e:d1:cc:cc:d7:
67:30:a8:b8:77:74:36:ba:73:5d:21:70:db:9f:2f:c9:35:ff:
bb:e4:e6:37:c7:29:18:b5:7e:78:7e:7b:14:c6:44:3e:3c:b4:
d4:79:9f:86:4b:a9:57:8b:b7:40:5e:69:19:03:9e:3c:1d:a3:
e1:ee:fb:64:98:98:07:fa:d6:ca:12:8d:04:92:16:4b:7c:b8:
91:85:93:7f:8f:27:ac:c2:75:31:de:dc:da:74:04:14:13:e3:
3e:d0:1c:74:5c:13:39:4b:a8:70:01:fb:ea:f3:6a:25:39:91:
3c:73:78:a6:cf:98:a1:ba:aa:36:e5:b9:64:19:9b:40:df:4d:
59:14:05:c4:27:c8:c5:0c:a2:e1:80:46:04:fa:ed:30:0f:d4:
32:f4:ee:f1:49:0b:49:5c:c9:3a:a5:1a:2e:5d:ed:01:2e:3c:
dc:32:f5:9a:4a:93:07:b9:04:32:70:58:bc:24:04:f9:fc:f6:
6b:30:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:02:33 2025 by rpki-client