Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: QIhsGYyku3M8UFJQhmBcXjjebMzrugJdCk2z20rzhRQ=
Subject key identifier: BD:3A:29:78:DE:A0:D7:6A:89:E1:13:0E:92:AD:00:84:03:E4:54:4A
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019769979B7A05EE832A9BE4A494F86F6928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 67
Signing time: Fri 13 Jun 2025 14:00:32 +0000
Manifest this update: Fri 13 Jun 2025 14:00:32 +0000
Manifest next update: Sat 14 Jun 2025 14:00:32 +0000
Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: b5yD2FJU4uJhjo9V0AtQg2fManvKIozssGPHyuR4RjE=)
3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:9b:7a:05:ee:83:2a:9b:e4:a4:94:f8:6f:69:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Jun 13 14:00:32 2025 GMT
Not After : Jun 14 14:00:32 2025 GMT
Subject: CN=bd3a2978dea0d76a89e1130e92ad008403e4544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:dd:59:d6:f4:4c:bf:1f:72:25:d7:59:0f:
e8:0c:d6:dc:42:3a:9c:5c:91:2a:30:92:60:1c:c0:
ce:98:47:0b:58:97:95:68:c6:db:5d:3a:ec:e9:c2:
12:62:79:16:8b:64:53:51:d5:ee:d5:2b:d9:cc:5b:
04:bd:a1:f9:d3:14:d7:01:3c:53:5e:5e:9a:c7:83:
cb:43:2e:d8:d6:da:e5:b5:25:e8:85:2b:b0:d4:62:
1f:7f:4e:c1:fe:a1:f2:54:ee:6f:68:ab:e3:54:0a:
e0:57:16:1c:59:64:6f:0c:e1:76:f2:52:fe:b6:93:
dc:bd:40:cf:d8:3b:51:c1:c2:da:d9:d8:ce:57:cb:
2d:34:51:2f:8e:b6:e9:12:c7:79:48:03:fa:6b:9c:
31:12:ed:e1:9b:29:56:cb:a4:e8:4a:0e:06:9e:8f:
dd:93:47:f2:67:80:2d:cc:be:7f:8d:20:6f:ae:a7:
23:dc:91:5e:0e:c0:8d:f0:9f:9c:b7:db:39:de:4e:
8c:6a:6d:48:ad:9b:bf:15:83:95:27:63:20:24:d4:
7e:d2:e0:8f:5e:42:c9:40:61:5c:4c:27:aa:31:91:
31:e8:08:44:c8:d4:2e:f2:46:58:dd:5e:56:2d:af:
af:a5:14:90:3c:07:ec:a6:8b:11:a3:a0:2a:b5:32:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3A:29:78:DE:A0:D7:6A:89:E1:13:0E:92:AD:00:84:03:E4:54:4A
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7d:b7:af:9e:77:81:b9:cb:a4:9b:e9:42:78:d9:2d:9c:b5:
8c:81:cd:ad:b6:91:6c:11:af:bf:11:13:61:48:47:0b:52:2b:
15:fe:1b:d5:9e:2b:46:f0:e2:e1:47:65:39:de:e0:d4:a6:4f:
e5:eb:c8:ae:f3:0e:5c:b9:69:00:48:18:cb:1b:09:f2:17:f3:
7a:00:22:09:2a:e1:3f:f4:c1:b0:dc:30:f2:5e:0b:2b:49:96:
48:0b:e4:71:17:b9:af:1e:c4:35:1f:c0:62:b1:2b:2c:46:ea:
8b:4f:1f:50:61:18:02:4b:78:4f:7d:be:ba:27:91:a6:ba:cc:
95:ac:a3:83:b1:39:05:7f:cb:3d:e5:c4:b0:61:8e:d0:73:aa:
93:0f:32:90:93:28:1f:da:b8:cb:c2:b1:dd:01:27:b7:08:d3:
67:b5:64:5f:34:1f:70:76:50:59:7a:17:73:3a:e0:5c:32:3d:
70:22:ae:60:0a:78:59:16:6a:19:74:d3:54:99:bd:78:3a:b1:
af:93:55:4c:8b:54:a5:ad:67:90:fc:99:c7:f8:ad:68:44:9b:
88:c8:5b:79:f5:a7:a7:27:f9:13:4b:09:17:81:df:f4:ad:77:
c3:7e:b3:21:fa:b8:fd:95:41:f8:77:72:e0:e4:77:fa:69:e1:
ec:f0:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:24 2025 by rpki-client