Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: Oi8YW2tURvbbs10X+dfCg3w5xzqoMVZjFPQaucwfBNA=
Subject key identifier: 91:E0:61:6B:B5:0D:F4:A6:18:82:86:2A:5C:77:2B:F5:01:45:CB:65
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 0197729ABFC615E65DCB9501E8E7BBFCD279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 08:00:33 +0000
Manifest this update: Sun 15 Jun 2025 08:00:33 +0000
Manifest next update: Mon 16 Jun 2025 08:00:33 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: nBJFCCiNVt4A3znpaFusjaGSt0ysRKesj2n4rrMBKmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9a:bf:c6:15:e6:5d:cb:95:01:e8:e7:bb:fc:d2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Jun 15 08:00:33 2025 GMT
Not After : Jun 16 08:00:33 2025 GMT
Subject: CN=91e0616bb50df4a61882862a5c772bf50145cb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:99:18:fc:1b:56:76:9a:ad:f2:e6:c3:6a:
14:85:41:79:da:d8:15:ae:66:d6:a1:bd:7b:aa:8b:
7e:50:83:b8:08:86:d3:79:b3:5b:2b:f1:e3:20:36:
5b:74:e5:f9:ca:e7:8a:cc:cc:8e:d3:89:7b:e1:df:
11:a0:d5:53:95:02:95:90:db:ae:a1:69:86:d4:88:
0d:83:fd:24:45:bb:23:e4:df:52:17:40:9d:05:68:
c0:25:6e:66:89:ca:b9:f1:a0:42:52:4f:97:54:57:
9c:70:75:d3:49:76:ca:53:9d:5a:0e:b0:d6:57:60:
a5:e4:b2:cb:a8:17:7f:78:01:79:33:31:e3:27:2e:
f7:51:b0:12:a9:06:3f:2d:2e:32:61:18:e1:6c:91:
c5:8c:6e:ba:2f:9a:cf:50:51:9f:98:ae:af:91:ed:
10:b8:f2:3b:b4:59:12:48:b1:76:c2:68:96:2c:b5:
e7:f3:a1:f8:c9:12:9c:56:50:1a:7f:34:85:5a:f6:
98:42:43:49:ab:09:3e:1a:9e:2b:fd:46:aa:d1:33:
9e:d2:7d:c4:3e:9e:85:1d:71:f8:18:a6:b4:22:d7:
4d:9b:f1:61:2a:55:06:58:ad:f9:de:33:4d:a0:2c:
82:6e:33:f8:44:f5:86:72:49:36:04:a5:a3:14:4e:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E0:61:6B:B5:0D:F4:A6:18:82:86:2A:5C:77:2B:F5:01:45:CB:65
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f5:50:b4:81:fa:ad:58:05:68:cc:43:de:db:0d:f5:e7:1c:
31:e6:6a:7d:5c:36:c7:97:1b:22:81:17:dd:c1:8a:69:e3:73:
91:c6:02:ac:b8:9b:2e:51:19:76:a1:1f:7f:da:04:02:ca:33:
ec:be:8b:64:35:74:51:77:be:34:05:2e:a4:8a:0c:78:ba:45:
da:68:58:a6:35:aa:84:88:95:41:92:80:6b:d8:ca:87:22:58:
0a:e5:6e:cf:b9:4b:e9:bf:10:72:06:74:67:af:4a:03:42:0a:
19:e6:bd:7b:f6:5a:99:48:1d:85:92:69:15:25:c5:97:d1:94:
ec:cf:e6:bf:76:24:e6:79:a2:23:7e:27:fd:e2:d2:0a:54:8a:
36:05:09:63:22:64:68:61:d6:dc:ad:4e:52:25:23:d6:78:f3:
ff:4e:25:ea:7b:c2:43:76:2d:3f:e5:0b:58:c7:90:1c:94:e4:
da:bb:57:50:85:84:01:fe:96:50:89:1b:98:6d:52:08:ac:a1:
37:a3:d1:7f:b6:66:65:f6:d4:84:99:84:60:cb:2f:b8:d2:a3:
e3:fe:ac:29:6b:a6:87:6a:45:98:5c:06:0b:06:d8:f2:d4:24:
15:5a:78:25:7b:0e:6a:bb:04:0c:62:63:a8:52:c1:6d:38:d5:
a6:ee:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:11:54 2025 by rpki-client