Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
File: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft (raw, json)
Hash identifier: XFFZ3GmWKXptqchgSt2NxM0fXPkleaEwPuah6Y6t7RA=
Subject key identifier: E0:73:EC:79:E2:97:82:41:16:0A:44:EA:2A:E8:37:C8:24:2F:85:EE
Authority key identifier: DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
Certificate issuer: /CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Certificate serial: 01976BBCD087D35AF36BFC5837CACF9E2B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
Manifest number: 2F
Signing time: Sat 14 Jun 2025 00:00:25 +0000
Manifest this update: Sat 14 Jun 2025 00:00:25 +0000
Manifest next update: Sun 15 Jun 2025 00:00:25 +0000
Files and hashes: 1: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl (hash: b9rXwOpboPbHUbvZqXF8hg7NJDAtFx7bu+SsWKRbjy0=)
2: ttiSctxtKk--_TjJLyKyxsLTH5M.roa (hash: cExQTThTOKNeo7f6JBcYKDPiMo9ejsGy+rMa2dC0A4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:d0:87:d3:5a:f3:6b:fc:58:37:ca:cf:9e:2b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Validity
Not Before: Jun 14 00:00:25 2025 GMT
Not After : Jun 15 00:00:25 2025 GMT
Subject: CN=e073ec79e2978241160a44ea2ae837c8242f85ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:8d:7e:86:7c:9a:8d:db:50:aa:e0:03:c3:
73:f4:87:38:c9:20:41:ab:1d:59:e9:b4:cb:c9:df:
fd:39:9f:d1:a0:98:ae:50:bd:09:b8:7a:af:a2:f3:
50:02:b7:33:79:db:32:93:ce:c6:4c:fe:d1:c5:45:
ab:96:86:1f:5a:65:26:6e:93:f1:a9:fc:3e:bb:5f:
85:52:c1:38:fc:df:47:04:76:9e:07:90:3f:25:2e:
1c:22:ee:31:50:87:f6:09:e7:bb:69:94:06:e0:fb:
6e:f9:1d:3b:51:56:5a:f4:3f:3b:8d:6d:ef:67:2d:
bf:ed:f0:7b:5a:6b:96:f5:85:66:4f:f5:a7:6c:b8:
42:3d:bd:b6:d1:27:8d:e3:c8:fe:05:4d:84:7e:69:
03:e9:3e:4b:b8:dd:9d:0f:96:a1:c3:52:03:b6:89:
37:a3:c9:4c:f1:77:2b:4f:f9:6d:2c:ad:72:3a:be:
5a:7a:58:8c:d7:f3:17:1f:bf:ad:b9:bd:aa:99:d3:
80:62:bc:72:17:fb:15:b8:81:b0:0d:ac:19:a4:c2:
0e:ff:63:f9:8a:14:34:7d:b5:08:c4:c3:a3:ef:98:
c6:bc:e6:9a:e5:97:f2:de:03:11:02:31:22:f2:56:
35:7c:a2:de:70:16:b1:24:d0:6b:33:81:6d:1c:b5:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:73:EC:79:E2:97:82:41:16:0A:44:EA:2A:E8:37:C8:24:2F:85:EE
X509v3 Authority Key Identifier:
keyid:DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:48:77:6e:7e:c1:47:bc:51:38:a8:d8:77:bb:e0:d3:3f:22:
74:f2:44:8f:86:2b:dc:93:d1:8b:4b:1b:e5:f7:6a:7b:81:b2:
1d:3b:f0:5c:86:96:90:e4:14:78:2a:bf:4d:e0:a9:7d:a7:d7:
d7:fb:33:05:47:a4:ab:70:b9:ab:3f:98:e7:19:5d:7f:b6:36:
23:f1:c9:32:34:22:89:c4:b9:db:81:b9:33:63:0f:78:59:07:
b8:7e:23:1a:1c:a3:e5:a5:4b:f5:e6:26:2c:89:3f:19:73:43:
d4:84:71:a0:68:df:9c:da:5d:6f:fe:50:0d:97:b4:02:56:e6:
c2:e6:9e:5e:8a:b1:e5:33:da:55:2d:e5:b1:41:f2:76:ac:6f:
0e:cd:ab:d5:07:49:08:71:03:8d:f0:b9:a9:bc:7d:5a:80:bd:
ff:7b:16:88:d5:e7:e6:5d:f3:59:66:b6:18:8d:1a:54:f7:ec:
78:da:d2:95:89:0c:bf:bc:07:06:4e:86:1c:8a:60:3e:14:47:
f9:ad:cc:9d:bc:d9:72:e1:b5:a5:6c:f6:df:27:a5:a5:86:4a:
ae:6c:2e:0b:b1:cf:1c:2d:5a:1a:2b:19:25:bf:e9:6f:89:7a:
47:1a:eb:84:4d:fe:4a:31:81:4a:d8:c9:19:f7:76:ae:4a:13:
e2:8c:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:55 2025 by rpki-client