Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: 0BzvO6BIfS9MeK7FBjJp7vtBoxfRzRlnoHXGycufDYI=
Subject key identifier: 3E:CB:C3:59:91:53:2C:7C:80:83:D2:3E:87:EC:76:1E:06:9B:94:CD
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 0197B70EB32B6E669FF94C1CD1D99B9443F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: WFcw4Vvt0BHcp4etpaQIk8RwbppbvUxCh5Em25MzqV8=)
2: 4mphuMGYKre7KcVIZklqvnEwe9w.roa (hash: BDdrPj5npMilCe1H11h3z51bgzRRHnfwNgW8/PXQiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b3:2b:6e:66:9f:f9:4c:1c:d1:d9:9b:94:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=3ecbc35991532c7c8083d23e87ec761e069b94cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:9b:65:db:9c:60:97:3a:bd:70:78:8d:65:
bf:b3:74:a4:b5:2a:47:f2:92:35:bc:3c:68:7d:74:
46:97:d2:23:5f:4f:e3:bd:48:9d:79:c3:09:d2:38:
f0:44:12:d0:32:59:9a:22:0e:ca:26:ea:21:1e:82:
d6:6e:7d:d3:38:a2:14:77:0a:63:4e:5f:6a:2c:cc:
d7:85:86:8c:ab:87:02:ca:2e:7d:a4:36:1a:a5:79:
43:d4:cb:a6:be:c2:ce:57:4a:13:a2:f9:d5:d1:12:
f8:95:2c:c9:be:68:4c:7a:1a:9e:10:32:bc:3d:fc:
87:1b:08:48:23:f4:26:b0:95:41:d9:2d:38:83:c6:
14:9f:67:de:71:16:d8:9b:0e:61:96:fd:3b:a7:1b:
62:cd:32:6a:ff:fe:01:d4:27:d4:e9:7b:cb:96:39:
b6:64:41:b4:35:06:a6:5d:b8:ca:3b:77:83:4b:dc:
a6:0a:5f:64:63:b2:e3:ef:fa:8f:f5:2e:ec:1b:82:
a5:8a:93:31:72:d6:33:33:34:75:9f:8d:bd:ff:dc:
b1:6f:77:45:9c:69:61:56:39:58:aa:be:42:a1:0f:
aa:f4:38:bd:fd:70:a7:81:28:83:ac:19:2a:5a:de:
1d:4c:1e:e0:27:ad:62:75:5e:f8:08:bd:c2:c7:37:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CB:C3:59:91:53:2C:7C:80:83:D2:3E:87:EC:76:1E:06:9B:94:CD
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:55:6d:88:7d:04:fe:1e:62:59:8e:ad:be:b7:06:7d:a6:42:
7b:03:38:33:ef:6f:3f:43:a9:72:0a:3b:ff:0b:fc:3b:7f:6e:
e6:50:45:6e:5f:a1:e8:7f:86:bf:17:99:0d:d1:43:3b:77:57:
37:1d:5e:46:2c:8a:35:0d:85:80:1c:ae:eb:f9:d6:d5:dc:69:
05:95:89:41:5e:3d:68:f0:8c:13:e7:ee:1b:20:5b:38:0f:3b:
69:85:cb:26:75:6e:29:6b:6e:3e:18:9a:ee:c2:50:42:f3:bf:
2f:c0:9e:58:f2:9f:6b:85:5d:ad:5e:16:ca:06:83:4e:21:6f:
9d:b3:02:11:f1:da:4d:fc:d2:96:ac:95:b4:b5:af:3b:e9:89:
8a:a5:5b:44:25:63:21:47:23:c3:7b:a0:c2:8d:73:ac:94:c4:
9a:89:b4:30:2c:58:ef:15:1c:5c:42:13:13:df:f4:3c:43:09:
54:c6:b3:db:28:e9:0f:c2:45:58:d1:2b:3f:cf:ff:5f:94:c5:
29:ec:67:aa:f2:2d:ce:8d:57:17:a1:1a:08:89:16:ec:7d:03:
7a:19:f8:f2:97:33:ad:07:10:51:dc:f1:ba:3c:80:4b:89:a4:
e4:8c:cd:ae:91:3a:2b:11:ed:38:54:23:22:39:91:1d:fb:0c:
af:d1:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:03 2025 by rpki-client