Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: monff2kWVaCxSrUz6Q1mCL//PLbT/XDnsa0uhzkzHhg=
Subject key identifier: B9:EB:26:64:CB:84:ED:4D:15:F1:57:99:1C:26:47:B9:F8:D9:81:7B
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 0197782F6EB0E2C116FCFF5D06CAD011994A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 10:01:03 +0000
Manifest this update: Mon 16 Jun 2025 10:01:03 +0000
Manifest next update: Tue 17 Jun 2025 10:01:03 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: eZeb//fhXTzhgtUP/aeZFABD8Na6UOFL73VJYDPAjHw=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:6e:b0:e2:c1:16:fc:ff:5d:06:ca:d0:11:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jun 16 10:01:03 2025 GMT
Not After : Jun 17 10:01:03 2025 GMT
Subject: CN=b9eb2664cb84ed4d15f157991c2647b9f8d9817b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:99:f3:70:9d:2a:c5:8d:d5:a2:00:29:a7:
fc:d0:70:52:e6:35:ac:69:88:96:bf:ae:16:b4:79:
8e:6a:b6:05:5d:30:84:bc:49:8a:34:51:df:84:1a:
c6:4d:85:95:b3:95:91:1a:14:82:36:d2:ee:04:0a:
c8:3b:00:34:da:eb:f5:41:ce:97:c3:42:b2:cf:88:
35:b6:4f:cb:60:7e:45:ee:59:4b:14:cb:91:28:af:
86:be:cf:4e:b1:56:7d:92:7a:ac:33:f4:bd:2a:00:
45:f1:ea:8d:39:a3:9b:61:a3:1b:51:26:86:1b:c2:
27:eb:69:07:a4:97:af:87:9a:65:fd:75:36:22:6b:
e7:e6:87:77:7f:d1:24:29:c8:bc:ec:d4:1a:e0:1b:
45:c4:bf:51:e1:b3:10:ee:ce:ff:9d:b4:eb:e5:af:
a1:8a:a3:38:1f:fe:1e:61:53:dd:fa:2b:c8:53:ce:
6d:25:9a:a0:c2:86:2c:6b:3f:bc:08:80:3f:80:34:
13:c8:fa:c2:40:f1:32:12:00:b7:b2:ea:05:ac:d6:
68:21:29:f2:79:e6:b3:18:c5:42:25:b6:0b:c1:47:
26:d9:5e:29:27:8a:bb:c5:21:ba:89:e4:33:ca:63:
a1:f0:bf:c3:a7:d0:bc:43:90:6d:79:80:92:91:90:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:26:64:CB:84:ED:4D:15:F1:57:99:1C:26:47:B9:F8:D9:81:7B
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:55:32:37:a5:bb:16:a6:93:76:4f:78:57:aa:6f:0d:f1:ce:
4c:bf:8d:b3:ac:c1:d7:06:1b:39:4d:91:b5:87:9f:32:1d:12:
c2:df:55:de:e7:79:7e:73:d2:99:b8:2e:64:91:64:5b:2e:e6:
3b:ae:9d:9a:26:55:49:4a:65:10:f8:49:a6:19:26:57:70:c8:
45:86:8c:e6:b7:c2:09:fa:99:a1:65:8d:db:c8:89:31:23:e4:
60:39:95:dd:37:8f:85:84:89:3c:68:d2:60:c2:fa:5b:f6:c2:
8d:f9:0e:d5:b8:4a:c3:c5:c8:79:4b:0f:12:58:e5:9d:5c:61:
ac:45:e8:22:9e:70:56:76:a2:c4:52:da:25:8f:65:d0:1e:a3:
93:1a:50:5a:1c:2a:00:84:aa:e8:01:02:45:51:19:03:9b:90:
85:5c:6e:e2:5e:a3:64:ed:0e:b9:87:61:64:f1:f0:9c:0d:1e:
9a:71:aa:9a:a6:4d:e2:92:eb:db:95:55:a9:e6:41:59:06:b7:
79:71:0a:88:55:92:81:64:a4:2e:c9:2e:d7:f7:1f:f8:37:7e:
ab:1c:dd:43:70:71:67:95:37:21:11:45:33:d4:2e:fe:94:bf:
db:ca:40:f0:f5:bc:aa:9e:38:0e:b7:92:a6:13:36:cd:8e:c1:
35:b5:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:48:24 2025 by rpki-client