Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier: 71XEsmCnekNMzzPkccPoqefCr9x7LYf8IaGFRtCmgJY=
Subject key identifier: E3:1E:30:FA:F4:89:3B:7D:C1:E0:21:A6:14:9C:51:89:B3:CF:61:4B
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial: 0197B5C4F25FE3BA1255ADB514ACB2134E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number: 0A35
Signing time: Sat 28 Jun 2025 09:01:12 +0000
Manifest this update: Sat 28 Jun 2025 09:01:12 +0000
Manifest next update: Sun 29 Jun 2025 09:01:12 +0000
Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: WCYtfiMlC0gVND9hepKTkotbI0X4fYqW1Jxb8KwbiP4=)
2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f2:5f:e3:ba:12:55:ad:b5:14:ac:b2:13:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Validity
Not Before: Jun 28 09:01:12 2025 GMT
Not After : Jun 29 09:01:12 2025 GMT
Subject: CN=e31e30faf4893b7dc1e021a6149c5189b3cf614b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:82:e6:26:1d:12:bc:72:f1:c0:be:1c:64:
b0:cb:28:d6:b0:f5:55:32:aa:1e:71:66:cd:3c:33:
b9:27:91:cd:af:9a:d2:ef:ba:d3:51:6b:71:c4:81:
cd:07:a5:15:cc:49:67:c7:35:ce:aa:89:15:4a:e0:
07:86:54:df:66:c4:12:e5:d4:9a:36:87:c5:63:60:
95:4e:c7:fb:a3:60:2a:16:72:21:2e:a0:d9:e9:81:
cb:f0:84:84:e3:d8:4a:db:1e:96:15:a7:6e:cc:22:
d9:28:11:b9:dc:69:ff:4e:24:a5:29:45:ea:ea:a9:
3b:77:0b:0d:91:3f:af:2f:fd:0c:2a:de:94:73:37:
4b:82:29:66:1b:eb:32:dc:1f:0f:2f:d2:71:fc:a1:
fc:19:17:d4:8f:24:f6:fc:51:d8:ca:f0:8a:6a:ab:
6b:df:b4:6b:b0:10:76:49:e0:e9:8d:d5:e7:f5:b1:
38:d6:26:b1:40:79:7a:39:ff:bb:9e:89:d8:56:16:
4f:6c:14:b9:22:8b:03:3f:37:9b:23:c9:a6:52:87:
9e:11:40:07:78:eb:fe:2f:8c:60:e6:b7:61:03:a8:
2c:bb:36:a3:d9:38:46:8e:18:3f:8a:29:82:0a:7b:
2e:ef:81:1d:b3:3c:54:cd:cb:94:91:56:7d:94:77:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:30:FA:F4:89:3B:7D:C1:E0:21:A6:14:9C:51:89:B3:CF:61:4B
X509v3 Authority Key Identifier:
keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1f:7e:0f:80:f9:eb:79:53:b3:fe:d4:3f:e4:82:ec:5f:af:
80:c4:38:2a:47:80:7f:d8:c1:36:01:df:36:43:6a:94:5a:05:
3c:87:6a:d6:56:62:8d:ae:80:36:43:a8:c1:e7:b5:29:36:8a:
35:5c:3a:bc:89:de:6c:5f:97:19:05:ec:de:63:dc:38:6c:52:
21:d7:7d:21:b9:df:fc:26:94:98:87:bc:3e:6d:8f:1a:04:f8:
ab:90:14:1b:1b:d4:e7:8e:08:75:aa:3e:70:7b:84:01:3e:eb:
90:2b:2e:7a:3a:11:14:6c:24:11:b9:68:b7:4b:59:8d:59:f6:
f4:45:cc:70:23:0a:ff:37:19:03:ed:42:9b:b0:b9:40:04:72:
31:94:e2:5e:09:2c:d5:eb:e6:2b:0c:90:69:8d:77:c8:68:b0:
cb:00:68:52:59:5f:8e:a1:03:eb:34:b2:8b:cd:22:34:ed:c8:
9d:6a:8f:d9:b1:ce:06:f4:2f:b0:74:1e:49:9b:3f:5b:3a:84:
6c:a4:3f:50:30:33:8b:43:0f:ba:b8:c1:3b:7b:76:d8:01:52:
83:48:5a:d0:62:8b:d9:11:21:23:89:6f:84:51:cb:1f:4d:5d:
47:2e:fc:7f:9f:99:14:59:d7:da:04:a6:a3:bf:c4:9b:54:99:
7a:f8:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:15 2025 by rpki-client