Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier: ngk6A2VktF+YWaNN1Qd2i/7dvlWdx+WObL1E17I9d5U=
Subject key identifier: AF:9B:7C:21:37:F3:8B:27:E8:62:31:69:31:58:05:D1:DC:E8:61:C5
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01976D06E74C2BF5A5AC7FD7A11F074BBBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number: 0CF1
Signing time: Sat 14 Jun 2025 06:00:58 +0000
Manifest this update: Sat 14 Jun 2025 06:00:58 +0000
Manifest next update: Sun 15 Jun 2025 06:00:58 +0000
Files and hashes: 1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=)
2: KYOg-dAg0vv0T7Zs4Y4I1onJjE0.roa (hash: g3qtavjbfCGQFsBz6TP8eR2TEu9Irpo7FH09zXX+uJU=)
3: MxnFRwJmFw3H9pKkZeWdK5EluaA.roa (hash: /4BdfcwDrvCIqi4T11GSU+QWVrhInkiIc6kfChEW8jY=)
4: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=)
5: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=)
6: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: woxv7b8ywhWlf00wh9JRLFoT4DGZAjpyjRGU6hJUnFI=)
7: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=)
8: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=)
9: rQW2dw98Fh-iwHUnu837pVRjuWc.roa (hash: Pa1aj93uAUOOLzOu+jsDUQFa2MsGoVi8bIM+YOqFcyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e7:4c:2b:f5:a5:ac:7f:d7:a1:1f:07:4b:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 14 06:00:58 2025 GMT
Not After : Jun 15 06:00:58 2025 GMT
Subject: CN=af9b7c2137f38b27e8623169315805d1dce861c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:f6:42:6b:20:54:91:12:d8:1d:10:d7:e4:
1f:70:71:9b:d1:53:09:7f:02:3c:d1:b7:d0:35:9c:
80:1e:1b:11:b7:c4:d9:49:1f:8a:30:59:96:b8:7d:
ae:8c:3d:e7:af:05:e0:9f:79:70:b6:e6:7b:1d:bf:
1a:73:5e:2d:94:cf:60:24:6b:65:5f:cf:f2:0e:e1:
69:25:5c:a1:ae:e8:55:cc:f3:50:0d:5e:64:98:a6:
62:7c:b2:41:e4:9d:0e:f9:15:63:c3:90:12:51:16:
b3:98:84:49:c5:38:bb:68:36:dc:05:e5:0c:5c:f5:
27:71:a9:10:5f:51:0b:08:fb:f3:b6:25:7c:04:95:
c9:fa:fc:a2:76:7f:24:c8:1b:3d:3d:ae:4a:be:16:
05:bb:b7:2a:92:b8:8a:8a:f9:c0:12:af:5f:e9:7b:
ef:7a:3d:c1:6c:6e:ff:d9:0d:63:29:62:c6:9f:56:
b5:d5:5a:4b:68:a7:9e:0c:1f:b1:52:5c:55:19:ee:
0d:c7:6a:09:db:b5:a7:a8:d1:e1:2d:f6:5e:50:04:
56:12:76:33:38:a9:9b:f0:91:73:c0:77:52:4f:44:
ca:b2:66:ac:68:07:fb:95:3d:7e:26:96:f5:79:78:
87:97:55:be:47:34:1f:4f:22:3a:dd:31:f9:e1:2e:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:7C:21:37:F3:8B:27:E8:62:31:69:31:58:05:D1:DC:E8:61:C5
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:85:15:8f:a7:bc:14:8e:7f:f5:77:e6:0a:cb:77:dd:73:
d1:61:fa:f1:4f:5b:15:d0:cf:59:fa:c5:c5:a5:95:28:dd:2f:
4e:cc:0d:2a:dc:e1:5e:da:d9:5f:44:28:c5:35:4e:0f:55:ad:
78:ae:11:a8:ec:e7:09:19:67:7e:88:1a:90:88:19:2d:2a:07:
2a:f7:69:26:5b:24:52:59:f2:a7:f7:92:58:64:5f:26:c1:ef:
6d:ce:87:a8:5a:ba:cd:44:bb:73:c1:c1:a2:e2:2e:29:20:11:
e9:c6:dc:a5:09:e9:b9:5c:bd:f8:8a:6e:06:b0:b7:8f:51:ab:
39:96:25:9e:5c:7e:e5:21:2c:b2:f1:2e:43:ca:74:20:89:bf:
db:30:3b:f1:17:8d:fb:06:ac:3e:50:21:cb:29:04:0a:59:a4:
37:0d:66:a1:68:40:85:ff:d5:f4:34:74:19:6c:b5:33:0d:e3:
11:83:a7:62:1d:73:71:fe:8c:52:76:a5:34:95:d9:e8:0a:99:
d3:1c:0b:11:d9:47:56:65:47:06:ea:cd:84:37:b9:c9:f3:dc:
05:37:b4:be:5d:d0:62:e6:80:4c:e4:63:50:17:69:f8:da:a2:
30:f1:ee:a7:e6:9c:f9:6a:a2:87:5e:cc:4e:79:a2:66:7d:06:
fc:1e:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:02 2025 by rpki-client