Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: AJdhtk8VXFZ6MxdkoeEv40TS1qvaaoc2aGKj8E51M68=
Subject key identifier: 8F:F8:86:E5:0B:25:86:68:50:8C:CC:8F:E7:A1:D1:BD:16:2D:A3:1C
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0197B77C54988342BCE2949EEC86BDCE25C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0EF8
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: kPts7IN4QDEohv7rpHWgySIQBJ5tkDwDI05PPnk7CTE=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:54:98:83:42:bc:e2:94:9e:ec:86:bd:ce:25:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=8ff886e50b258668508ccc8fe7a1d1bd162da31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:7e:25:3b:5f:07:03:e6:4f:e7:94:e4:ed:
6f:cf:f0:25:e4:24:5c:49:c1:3c:15:df:b6:d7:2b:
a6:ce:18:f8:5e:16:0c:f4:cf:6b:ea:72:9f:9f:ed:
a2:5d:21:14:75:4a:d0:8d:d7:20:e2:84:26:5e:33:
51:ad:62:b1:9b:bd:b2:1c:6e:f0:ab:d6:4e:5e:1a:
8f:58:ca:60:76:42:72:ed:15:9e:63:64:b4:b3:70:
4a:bd:78:b3:3f:7f:72:ba:c3:98:ee:30:a0:03:df:
83:75:4b:d6:3d:35:62:bf:66:4d:62:ca:9f:3c:b0:
f7:2b:f5:0d:d5:28:cf:6e:ee:15:70:19:2a:66:89:
73:1d:89:a3:8c:f7:1c:08:6b:e1:28:4f:9e:09:5d:
a2:c0:07:0f:78:69:2a:5f:01:53:46:ed:23:b7:5c:
cc:c4:b5:8b:f3:a6:89:be:89:ac:2d:9d:8f:16:ad:
d3:b2:86:89:25:d1:fb:83:0f:15:82:4a:3f:04:d9:
94:0f:23:bb:96:fe:9a:14:9e:31:3c:94:d0:f5:22:
f1:2a:e2:7f:68:32:d2:8f:4e:17:7c:50:26:c5:8d:
96:ab:08:bf:0c:82:c7:26:ab:e9:f7:03:20:28:44:
18:68:83:c7:66:02:91:92:0f:a1:70:4c:b4:27:3e:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:86:E5:0B:25:86:68:50:8C:CC:8F:E7:A1:D1:BD:16:2D:A3:1C
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:2d:33:27:83:9d:30:af:1f:10:89:99:d7:c3:3d:3c:43:
55:d6:63:5e:46:15:c1:5e:20:01:83:9d:0c:15:bc:bb:99:04:
90:98:2e:9c:62:75:40:dc:dc:0e:93:7b:f5:45:b0:8d:e4:ac:
de:a5:09:a2:62:00:bf:39:ad:a7:81:fd:bc:5f:75:b5:b7:83:
7c:57:01:7a:6d:68:aa:ae:8c:94:cb:62:e5:80:08:d7:46:f2:
78:41:84:3c:a4:b6:5a:9f:4e:d3:ce:59:a9:ef:3f:0b:6d:fc:
90:b8:a9:46:c1:25:49:a6:90:fa:c8:07:18:f3:a2:d2:77:66:
a5:d1:1b:ef:e2:5f:2c:88:2d:cf:13:e2:11:44:f7:bd:df:2e:
69:f5:97:27:a5:e8:62:58:b7:d8:27:91:14:e3:33:6d:70:92:
a9:ec:05:ab:9e:17:1c:fb:bf:ee:ae:91:77:88:72:4a:c6:0a:
59:22:b9:46:83:bd:60:f0:ec:c6:af:62:c0:50:1a:17:53:1f:
bb:00:6d:49:89:f4:22:7d:d4:fc:a8:61:b0:df:6e:7a:c8:d7:
73:fe:0b:37:29:48:70:d1:15:70:77:6a:f6:f8:69:c9:84:ea:
de:87:0c:de:10:60:be:60:c8:c0:da:24:1b:06:e4:b5:73:ce:
fe:97:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:44 2025 by rpki-client