Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
File: 3VBysTiAwfG6hvzExAKX9dn0N3Q.mft (raw, json)
Hash identifier: n+csrNYEGpi6enFQSnudSb8O0tsVVztqKr0FTexWLr0=
Subject key identifier: 68:A0:9C:79:02:8B:31:E9:53:C1:6C:1B:39:16:57:7C:60:D0:36:D2
Authority key identifier: DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74
Certificate issuer: /CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
Certificate serial: 01976C2AF06089EA06290415D88F4372C2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 02:00:42 +0000
Manifest this update: Sat 14 Jun 2025 02:00:42 +0000
Manifest next update: Sun 15 Jun 2025 02:00:42 +0000
Files and hashes: 1: 3VBysTiAwfG6hvzExAKX9dn0N3Q.crl (hash: XPtQHDFshKF9uF4IJBDBmi6mTagB0t18a/VlaDcl2j0=)
2: PJZXdpkwhKYbc-mgI8o-ftVhCug.roa (hash: SBqSW5ehFYdMdBJe2odGE82C7AsVO9/yZgJ8RXmPXUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:f0:60:89:ea:06:29:04:15:d8:8f:43:72:c2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5072b13880c1f1ba86fcc4c40297f5d9f43774
Validity
Not Before: Jun 14 02:00:42 2025 GMT
Not After : Jun 15 02:00:42 2025 GMT
Subject: CN=68a09c79028b31e953c16c1b3916577c60d036d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:be:09:35:74:d3:b7:33:df:51:dc:6c:9b:
a7:41:bb:a3:66:b0:ed:11:7f:ea:c7:91:15:c1:f5:
d6:99:2f:2e:b2:18:16:1e:e3:34:10:7c:b4:ec:40:
0e:e8:31:a1:78:bc:4d:5c:a4:44:ce:75:71:82:1e:
1f:74:69:9a:36:d6:36:1b:8b:25:ef:44:20:1d:9c:
25:7c:e8:04:e0:56:9e:7f:9a:44:30:c7:5e:6c:7f:
77:99:7b:fc:b6:8b:26:6e:4c:cd:47:56:3e:8b:4b:
14:6f:f5:e0:23:01:b0:c0:eb:ad:b4:55:eb:e2:08:
bd:f8:bb:d7:4f:08:40:18:47:bd:da:4e:15:8a:69:
36:42:4f:cb:36:89:58:2d:3c:7e:e5:16:6b:c4:42:
cb:68:4c:45:ee:d4:c8:5e:06:11:22:16:96:d1:18:
d2:05:58:26:99:a7:8c:6f:89:c2:d2:ff:ea:5c:4e:
cc:c0:48:e2:82:54:02:57:5d:89:27:27:72:53:18:
e1:16:68:60:60:8e:77:89:e8:91:ad:85:ee:a9:8d:
87:77:23:17:44:ed:dd:db:fd:52:a8:7a:49:89:ee:
c7:27:48:b8:b5:36:b1:67:7a:3a:41:24:24:71:aa:
5e:3f:f9:cb:df:1f:8b:bb:53:87:37:d2:79:c4:d0:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:9C:79:02:8B:31:E9:53:C1:6C:1B:39:16:57:7C:60:D0:36:D2
X509v3 Authority Key Identifier:
keyid:DD:50:72:B1:38:80:C1:F1:BA:86:FC:C4:C4:02:97:F5:D9:F4:37:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VBysTiAwfG6hvzExAKX9dn0N3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cbc18f-e6db-4bd6-8427-64d1bc735bac/1/3VBysTiAwfG6hvzExAKX9dn0N3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d1:98:60:52:df:a3:fc:be:81:c4:33:8e:b1:57:6a:a2:00:
20:e9:fc:5f:6f:9f:2e:bd:2f:61:12:b8:ea:40:0c:df:cb:f0:
df:9e:11:ac:33:95:11:c7:ad:c9:93:51:95:66:b2:60:47:c1:
a3:34:d3:7b:b9:ff:d4:6b:f6:5a:4a:54:d2:27:e9:98:cb:5f:
66:d2:26:1c:17:ec:5d:1a:ab:03:16:13:c1:fd:ee:5e:15:22:
b6:74:c3:d4:44:22:85:0d:3c:82:d5:21:95:e8:9e:ff:84:a9:
9c:70:27:f5:01:c3:80:7e:71:fe:86:7a:25:28:1f:01:52:c7:
af:80:50:d4:c9:55:ac:42:39:26:88:3c:f7:c4:95:2e:d9:8b:
df:51:da:19:be:36:bd:d2:21:96:86:1c:10:33:11:c5:fd:aa:
a4:a4:02:c7:c5:20:15:fc:dd:ae:a0:d4:81:de:eb:73:7a:29:
d0:d1:38:4d:be:50:d1:57:e5:f6:84:6b:7e:26:56:33:6f:8b:
4c:cb:af:0f:c3:7e:b8:0e:f5:97:52:4e:20:58:a7:08:d9:35:
bf:17:cc:9d:6e:a8:07:c1:be:eb:1a:b7:d0:71:84:f0:b1:af:
42:5e:c1:f2:e6:1e:93:93:7f:38:d1:7e:e8:57:ec:ba:bd:0c:
d5:36:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:54 2025 by rpki-client