Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: ilvp1RQpCqPrW8OAlGjfOf347Ks1bARAg2cf2io6Bgw=
Subject key identifier: D7:11:FA:21:E3:4C:DA:B4:78:19:9D:62:7F:3B:BC:AC:25:E3:A2:47
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 0197B63299A1703FB447B3AE20ECB74981B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0D17
Signing time: Sat 28 Jun 2025 11:00:58 +0000
Manifest this update: Sat 28 Jun 2025 11:00:58 +0000
Manifest next update: Sun 29 Jun 2025 11:00:58 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: zbIxXr//MWoJWdcp4fMWaXALkAkerIkP/P9Yg8mQcG4=)
2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:99:a1:70:3f:b4:47:b3:ae:20:ec:b7:49:81:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Jun 28 11:00:58 2025 GMT
Not After : Jun 29 11:00:58 2025 GMT
Subject: CN=d711fa21e34cdab478199d627f3bbcac25e3a247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:f4:81:67:f6:d0:38:5f:15:ad:f9:c9:79:
06:3a:2b:83:43:75:36:4f:f4:f6:59:2a:7f:b4:b3:
d9:1a:78:4c:36:53:c2:b3:b9:44:3d:48:6a:f8:a2:
6b:a8:7d:63:f7:f6:ba:6a:3b:f8:b6:5b:38:3a:a8:
83:24:61:06:67:ea:73:60:91:a5:89:91:0b:9a:ce:
ab:6e:a6:1b:dd:95:bb:ab:f5:20:bd:e0:f5:28:91:
bf:f6:c9:7d:a1:b4:85:1c:04:7c:2e:1f:2a:51:a2:
57:e6:b1:fe:00:bd:bb:07:7d:46:df:16:85:b0:a2:
13:c7:72:5a:5b:78:d8:07:5d:f8:a2:85:60:2c:fc:
85:ed:a9:23:93:68:36:40:1a:26:84:0e:9b:b2:07:
50:b3:8f:9f:60:34:82:02:18:fb:65:ce:5b:31:f2:
5d:18:7a:ce:76:c3:a8:80:03:45:67:79:e6:bc:b6:
10:ce:a6:2e:07:09:3f:28:bf:93:bd:00:f1:dc:dd:
b9:87:55:90:d2:11:84:0b:1e:33:7d:e5:59:49:8c:
95:4e:1c:cb:21:9b:56:60:a1:80:88:c7:bb:c6:61:
8b:a8:8d:db:51:81:f5:bd:9f:ca:74:9a:2a:66:11:
5f:0f:fb:a1:fa:b1:ed:06:e6:08:4c:a3:5e:45:d3:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:FA:21:E3:4C:DA:B4:78:19:9D:62:7F:3B:BC:AC:25:E3:A2:47
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:fa:2b:ba:9a:fe:00:13:81:cb:a1:c0:61:5d:7d:10:ee:
c7:e6:2d:ca:27:3d:c8:ba:7c:79:c1:b2:af:d2:23:17:d5:aa:
5e:7b:ce:be:8b:fb:2d:25:1b:b3:e1:64:2a:24:99:84:11:76:
82:0b:57:84:7a:9e:17:ca:eb:c2:02:79:c2:07:7e:ca:94:be:
cc:92:06:82:6b:f5:be:b0:36:b0:74:4c:98:f9:13:4c:6b:96:
94:27:6d:14:72:74:67:1e:1c:00:c8:82:91:37:d1:2e:7e:08:
fc:22:52:57:c2:d8:79:09:ca:3d:e1:0b:6b:15:20:c0:9d:8d:
df:92:36:05:f7:bd:d7:b8:07:a1:c5:92:36:a1:d2:f4:8e:f1:
58:c2:9a:43:0a:c0:f3:12:61:7e:9d:39:47:c9:5c:54:7b:5b:
ff:15:98:97:6a:28:57:2a:49:55:2e:d0:a9:22:65:63:c4:3d:
a1:96:f6:a2:8b:db:4b:f7:88:fb:22:36:ef:9a:f3:c6:65:ca:
97:82:2e:d7:3a:62:41:dd:ac:71:49:75:a2:9f:86:99:17:b5:
dd:f4:b5:28:1b:47:2d:12:7b:b0:83:06:b5:44:87:3d:e2:8f:
41:d5:ee:b4:73:91:58:7b:59:98:16:2f:b4:12:40:b5:b5:38:
f8:76:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:55 2025 by rpki-client