Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: ObqeMCFEz9p7cU41jetrlV6IQ2sOLrDHkrI+3o4+Owc=
Subject key identifier: FF:40:90:53:D6:7F:B6:4C:C5:7C:86:A1:F2:6A:1A:F8:7A:F7:49:CA
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 0197B96AB571A5FCD9A7958F6C49D527C603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1436
Signing time: Sun 29 Jun 2025 02:01:07 +0000
Manifest this update: Sun 29 Jun 2025 02:01:07 +0000
Manifest next update: Mon 30 Jun 2025 02:01:07 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: 9LMuQDrJK5bPH9RVw/cq94r29jT+qBuGFA6Ummi6bEM=)
2: NTq0FDzH2xxPaa-1hxtnePIlEA4.roa (hash: LRFHdSsVugdN6TwKBfGKGPR3Nf4KsaI4iw69J8bmMBI=)
3: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:b5:71:a5:fc:d9:a7:95:8f:6c:49:d5:27:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Jun 29 02:01:07 2025 GMT
Not After : Jun 30 02:01:07 2025 GMT
Subject: CN=ff409053d67fb64cc57c86a1f26a1af87af749ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:76:ce:45:d8:90:85:be:bd:34:f6:e5:48:
bb:c5:85:3d:45:7b:35:f2:0d:ff:d9:67:5c:c3:f3:
d4:c0:80:07:8f:2d:c1:20:53:9e:8d:f5:75:24:7c:
99:12:70:35:f6:b5:eb:69:1e:9d:c3:8d:33:76:6c:
6a:95:7d:55:f2:17:0e:91:1d:70:b6:58:bf:81:e4:
e2:86:62:3c:eb:42:b0:e1:2b:25:35:87:fd:00:a6:
1d:ee:af:55:be:35:76:ec:b7:aa:6f:1e:c0:7f:0b:
41:9e:3d:53:61:1e:67:05:6e:e8:87:66:2c:72:5e:
3b:63:c5:f7:14:01:11:de:b9:f5:82:a9:d2:4a:44:
2f:52:3c:23:08:93:39:88:a1:2b:f2:7c:c5:a8:29:
57:33:50:ed:ac:a0:a5:f6:47:4e:82:4c:56:cf:13:
a9:8a:b3:7b:1f:1a:c8:87:eb:52:04:44:0f:a4:ca:
db:b8:e2:cc:2f:c0:9d:00:58:3b:1d:6a:6b:e1:8c:
01:5e:bf:24:22:9e:16:98:16:35:fc:96:ce:7f:fa:
56:50:63:04:ca:62:ab:4a:14:99:e7:ac:41:ea:ea:
30:f3:98:07:18:9a:8c:bb:10:6c:c3:e5:3f:a2:70:
76:32:95:db:f3:86:5d:8e:9a:96:c5:ee:21:78:07:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:90:53:D6:7F:B6:4C:C5:7C:86:A1:F2:6A:1A:F8:7A:F7:49:CA
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:51:18:b2:a8:3e:2a:ec:a0:38:93:70:da:df:d7:08:11:
db:eb:e0:09:99:c2:7e:7c:63:3c:1b:0f:00:a8:d5:c2:0c:5a:
84:eb:4e:26:67:8b:89:ec:fe:70:28:f0:be:a6:37:e0:4d:b9:
38:08:6f:3d:48:a3:f8:1c:30:3c:50:6b:74:70:93:f6:94:95:
9b:50:1a:72:17:a0:0d:62:a6:54:b5:61:cf:9e:d0:e9:cb:7c:
45:73:79:c6:6d:5e:c9:f9:f5:21:65:98:bb:43:12:79:bd:b5:
b9:ae:fb:75:58:e4:f1:21:7b:95:51:bc:26:cf:f9:e0:45:bd:
8c:51:bd:5c:18:a4:f2:d7:96:43:7a:c4:0f:ff:c1:67:4a:2c:
72:32:dc:04:26:d7:c3:5b:66:78:d8:ec:e2:2c:19:e0:59:9f:
3e:bb:87:6c:ff:28:8d:65:cf:10:4f:80:52:70:00:9c:69:71:
2f:f5:85:68:b7:b1:9b:fc:5a:1f:3a:35:03:12:2a:50:ae:39:
78:1f:dc:37:85:67:3b:32:e5:c6:0c:1d:3a:ad:62:ee:3f:b3:
5b:29:85:dd:90:29:e7:f2:c6:b9:db:4b:66:31:0b:6f:48:80:
98:93:86:88:95:a9:33:44:fe:2a:85:93:98:2b:bb:73:70:9a:
91:49:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:23:01 2025 by rpki-client