Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: 9q1dy/XW/2O8fXij463C5rO8kX3l8R5UkwuPRQvbvog=
Subject key identifier: 61:EF:E0:BD:0D:E1:64:73:C0:6D:1B:0C:44:60:02:09:A4:B7:79:53
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 01977FE94ACF8ECE2DC61E6CA086C5660AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 15A2
Signing time: Tue 17 Jun 2025 22:01:24 +0000
Manifest this update: Tue 17 Jun 2025 22:01:24 +0000
Manifest next update: Wed 18 Jun 2025 22:01:24 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: yRiZwIX6OR36KbjmMz1Ny3CDo84LARe6WvAeS4+7DJw=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:4a:cf:8e:ce:2d:c6:1e:6c:a0:86:c5:66:0a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Jun 17 22:01:24 2025 GMT
Not After : Jun 18 22:01:24 2025 GMT
Subject: CN=61efe0bd0de16473c06d1b0c44600209a4b77953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:4b:a0:00:bf:6b:cd:6d:ff:9b:3a:5a:91:
b0:89:9e:c8:44:85:32:73:32:bf:6b:50:ed:ec:4d:
32:ae:22:14:c6:74:d5:9e:42:e9:0e:18:9e:2e:73:
50:f4:f1:04:cc:c7:89:23:18:65:08:b8:bd:b3:7a:
97:83:81:de:98:f2:eb:01:92:f0:c2:b6:aa:35:cd:
34:bc:d1:c0:0b:9f:dc:a8:7d:b1:82:ff:3b:6b:97:
3f:4c:0b:c3:df:c7:c9:06:62:37:cb:31:b1:5e:b9:
cf:7f:77:da:b6:67:27:f6:e1:4f:36:8e:7b:37:8a:
f7:64:aa:9a:26:ee:91:b5:e9:33:8e:40:ff:2f:75:
75:1d:62:39:47:79:dc:00:1f:04:2d:c6:75:a4:d4:
70:9f:5a:a5:73:9d:81:31:52:57:32:4c:8e:4a:a0:
fe:16:d0:d8:8b:b4:c5:4f:e6:56:b0:a1:25:2a:81:
8b:5e:cf:61:3a:42:aa:04:ff:e8:e5:46:1f:ea:9c:
08:38:99:b8:b1:4b:aa:c3:92:9a:11:f1:45:a9:87:
c1:9e:6b:80:41:33:d9:c8:e0:44:8e:ff:b0:6f:d6:
eb:21:45:43:0d:9c:b5:c1:7a:8b:10:8d:48:1e:9f:
57:59:14:38:6c:8e:76:16:95:90:5f:99:fd:1a:18:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:E0:BD:0D:E1:64:73:C0:6D:1B:0C:44:60:02:09:A4:B7:79:53
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ac:46:cf:a4:f3:1e:7a:d2:4d:fc:1a:a3:01:da:30:50:bd:
df:15:2b:ee:87:e9:ec:31:a2:63:53:ca:6d:bf:c9:c8:c4:94:
14:63:98:65:42:77:db:0e:dc:1f:38:50:92:d0:86:ba:bf:e6:
ff:1e:4e:39:94:2c:91:ef:08:8f:c6:ea:de:7e:77:ed:dc:ec:
e8:50:6d:11:fe:cd:e3:1c:36:7a:be:07:dc:48:28:08:42:2c:
9b:65:25:ae:35:8f:c7:7e:a9:85:06:ed:c1:70:ff:22:89:07:
bc:77:e5:5a:5d:29:a6:71:62:b4:e2:ad:45:61:dc:9c:ef:ae:
37:fc:cf:85:65:db:dc:f1:35:af:44:82:99:e0:9d:92:69:37:
1f:f5:a6:22:3e:9b:e6:19:1f:04:52:6f:73:39:19:14:a0:df:
fb:56:0d:04:19:ae:26:74:a3:07:20:5d:6d:ec:9e:eb:b8:7c:
c4:c5:c4:f4:ec:03:fe:3b:75:1b:8f:d4:ca:91:da:f4:76:27:
5e:a6:44:9d:43:b1:37:52:fb:f1:c3:be:96:01:f0:e8:14:46:
7e:dc:5e:bc:e2:29:21:ce:b3:6a:e1:ac:a0:39:bb:49:51:f8:
91:43:38:53:ee:c4:ed:d6:b1:b9:26:30:8d:2a:a0:85:d4:2d:
25:03:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:54:34 2025 by rpki-client