Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: rDn183azRdgLzwIdFBk758y4co/lkY3nwpGyZNUv3uc=
Subject key identifier: F1:D7:0B:7A:9A:09:6F:A0:B0:19:57:F6:95:32:DF:C9:37:12:2E:B5
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 0197B7EA3C90E65F0C540A44F819877618CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0548
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: sdgChirgxpEelAadvy0EbBTPBZ1nkzNibfBSr55isVA=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3c:90:e6:5f:0c:54:0a:44:f8:19:87:76:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=f1d70b7a9a096fa0b01957f69532dfc937122eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:5c:03:6d:be:92:04:bc:c2:e1:60:8e:d6:
e4:be:bb:01:3f:a7:80:36:1e:bf:0c:80:59:2e:65:
43:94:19:4f:0b:26:00:1e:23:7e:db:e1:5f:a6:34:
47:d1:5e:2d:a0:fd:cd:9f:e1:64:dd:ea:d3:8c:74:
c4:37:c1:41:a0:08:74:65:06:3b:bf:ca:80:c6:cc:
01:67:06:36:9e:18:79:37:bc:01:c3:6d:59:ee:0f:
fc:da:53:9f:40:c9:53:10:67:53:67:f6:88:f9:cf:
66:66:cb:47:90:ca:9e:8b:02:d3:81:33:e0:34:7f:
e4:b6:ae:fa:f8:e6:e7:69:d7:5f:5e:0a:f0:44:01:
9b:2f:88:d9:09:15:e9:a0:2b:3c:48:80:d3:d3:1e:
76:6f:c8:03:47:f9:25:e0:de:fd:b6:5a:06:6a:dc:
fb:1f:21:c1:d4:45:b9:79:1c:99:7c:e1:d0:59:bb:
8e:68:f9:1e:dd:11:bd:09:87:ea:9b:6e:76:b7:29:
30:19:a5:21:96:51:61:1b:8b:7d:41:7f:ae:9b:22:
df:64:71:cd:d0:4e:7f:8c:d7:99:3f:21:6c:d6:4e:
36:09:6e:08:6b:8e:d1:e4:67:42:0a:18:e0:b1:e4:
23:d9:bc:ad:c6:9b:79:62:9f:2a:a0:87:26:73:31:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D7:0B:7A:9A:09:6F:A0:B0:19:57:F6:95:32:DF:C9:37:12:2E:B5
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:05:ac:1c:c5:d3:d8:23:73:bb:9c:28:a2:73:26:28:83:9c:
83:ec:67:79:41:0c:98:0d:af:67:97:ce:44:42:49:61:f4:3e:
de:28:3b:8e:1a:67:97:d6:d5:ae:0d:73:29:82:35:3d:6a:8a:
cf:87:ca:a3:ee:cd:7f:0d:d1:45:23:32:c8:8c:74:1a:f9:12:
b6:0a:eb:6e:39:90:6b:e6:10:0b:14:f8:01:1b:b9:8b:48:2b:
9f:f3:f7:c2:1e:88:f5:0b:87:b7:d7:f5:e0:b2:e0:82:23:58:
ff:83:0d:66:c6:b1:b0:f3:54:d1:ca:0b:8d:c3:e9:57:d1:e5:
3e:5d:25:7c:f5:15:3f:90:14:89:f2:8e:be:3a:0f:f9:aa:65:
29:2b:0d:39:8c:21:15:65:68:7c:6a:bb:bf:ae:66:c5:ec:44:
6f:76:c9:ee:ea:10:58:9f:e4:e4:0e:9f:fb:55:4c:5a:8e:9a:
34:86:73:e8:2b:af:cd:5a:48:ef:40:d3:f4:4b:5d:b2:da:e4:
bf:a8:a6:b1:df:df:d0:47:09:91:16:7f:2d:02:48:b8:86:e5:
1c:4b:45:f7:1f:bb:9c:3c:d6:59:77:75:e1:b1:3a:3f:16:f8:
e3:e4:51:f8:3a:12:89:8e:a2:c2:b2:32:de:d6:2d:aa:ae:6b:
1e:9d:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:25 2025 by rpki-client