Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: x55HBjkqFpRQ7/+/I48WdyPPwJxqUfzXqzQG+AWIXVU=
Subject key identifier: CD:68:40:00:26:B6:67:08:D2:7D:5F:6F:E6:2D:2F:32:01:AE:FE:29
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 0197711A6372D38FFEB1FFBA2D75434373DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 01:00:44 +0000
Manifest this update: Sun 15 Jun 2025 01:00:44 +0000
Manifest next update: Mon 16 Jun 2025 01:00:44 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: PR3xcsrfkI58pV/6JC/TLk2v9k0m+hWkoyN80jrXYRk=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:63:72:d3:8f:fe:b1:ff:ba:2d:75:43:43:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jun 15 01:00:44 2025 GMT
Not After : Jun 16 01:00:44 2025 GMT
Subject: CN=cd68400026b66708d27d5f6fe62d2f3201aefe29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:d5:d2:a5:ca:21:c7:e6:80:b3:66:29:bd:
98:92:aa:c5:3a:73:60:e0:87:45:f8:56:53:9d:c4:
8c:0f:57:6e:ee:b7:4f:4c:d4:76:61:7f:6d:16:22:
bc:12:69:d3:4a:b1:71:34:a8:18:50:9d:0c:40:7f:
e0:81:2e:ec:68:d6:6b:24:9f:98:3c:c1:81:a1:69:
b8:93:c4:61:90:4b:4e:72:39:4d:8f:c3:66:96:a0:
09:62:7e:f3:86:4c:73:18:af:1e:d0:92:80:7e:87:
9c:8a:1c:b9:37:48:b7:5b:50:38:d9:a9:c9:b4:72:
32:d8:6b:59:7b:a7:8e:ec:2a:5b:68:ba:1f:7f:0a:
86:7b:5d:4f:98:5e:ea:9f:2c:cc:4d:4f:0a:96:1c:
7b:b1:86:af:c1:8e:9c:6d:66:d0:2c:6d:b5:63:cb:
2e:62:a3:22:be:6c:43:c8:9d:13:0d:4f:65:99:5a:
32:e7:3b:8d:d7:2c:0f:a7:f1:34:f2:e9:3c:73:99:
94:e4:c8:0e:8b:99:4e:ca:db:bf:9b:62:36:37:5f:
ee:92:0a:0a:e2:85:55:8b:bb:66:b1:09:bc:60:e9:
fa:74:03:69:d7:88:69:23:ed:78:ad:08:12:08:e6:
9a:33:f7:60:32:f8:c6:ad:60:96:73:81:22:a0:72:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:68:40:00:26:B6:67:08:D2:7D:5F:6F:E6:2D:2F:32:01:AE:FE:29
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:55:84:c1:ec:7a:09:2c:a3:88:d0:48:98:c3:78:75:45:
22:79:9c:81:9d:b3:d6:cd:96:48:b1:6a:96:9b:6d:c6:c7:98:
26:be:b3:2f:d6:69:4f:47:11:1b:6e:25:77:c3:68:b2:6d:33:
77:82:d0:94:bd:7e:33:5d:a6:b6:d1:e3:69:c5:ec:f8:b1:00:
16:2f:9b:98:10:f2:3b:46:61:d9:d5:a1:1c:ce:8b:ca:db:28:
3f:c6:90:7a:64:ef:bc:47:9e:7f:00:28:5f:16:05:ff:2c:43:
10:58:8b:32:1b:75:ec:d1:86:11:c1:ce:e1:99:db:2d:27:25:
7b:3f:09:bc:08:83:8f:1c:d2:24:b3:3b:39:82:ac:9f:79:d3:
1a:d1:95:24:e5:82:de:fc:c6:a4:72:1c:a7:66:69:30:33:74:
66:b6:26:92:e9:13:57:c1:42:02:a9:c6:83:71:87:ab:db:03:
45:42:dc:fc:f2:40:bb:aa:41:b7:9f:eb:f8:dc:2f:54:5d:2a:
fa:15:5d:03:0c:d2:3e:5c:23:b4:92:b0:0a:e6:b5:a6:a9:ab:
61:ad:e6:6e:8e:de:df:e1:5f:08:8e:0b:6f:33:6e:14:6c:f5:
08:91:68:a8:ba:43:ce:2a:86:e6:14:77:a2:2f:7b:42:51:fa:
a6:14:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:49:11 2025 by rpki-client