Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File: a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier: tUD7fmP/VR1dFYdL+cbHtAwJ/YWNLDxnT+CWTd+nNPA=
Subject key identifier: 70:DC:B8:4E:83:BB:F7:37:74:04:76:B9:20:71:7B:01:99:82:0B:94
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer: /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial: 019771BF3E6A574A2A61E98BE5D099C41A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number: 0F09
Signing time: Sun 15 Jun 2025 04:00:48 +0000
Manifest this update: Sun 15 Jun 2025 04:00:48 +0000
Manifest next update: Mon 16 Jun 2025 04:00:48 +0000
Files and hashes: 1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: QGSmCWNKgrZE94hCyblZl1k7EMwaFJ+EWZgAdCirGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:3e:6a:57:4a:2a:61:e9:8b:e5:d0:99:c4:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Validity
Not Before: Jun 15 04:00:48 2025 GMT
Not After : Jun 16 04:00:48 2025 GMT
Subject: CN=70dcb84e83bbf737740476b920717b0199820b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:8a:89:1f:86:cb:29:5f:33:73:fc:8e:7e:
5a:ea:88:70:7a:ec:0c:aa:93:4f:0a:7c:55:16:1a:
9b:c4:c0:ce:7d:7c:de:35:86:ab:1e:f9:bd:58:cb:
57:3f:3d:4f:df:84:ed:14:84:d9:67:16:9c:43:1c:
e3:b1:9b:0f:58:f9:21:f2:93:84:68:73:b2:71:46:
70:af:86:9f:50:10:d1:a5:ca:28:84:b1:9b:33:04:
88:da:5d:ea:d6:08:ef:29:5d:ec:6e:15:fe:3c:0c:
6a:ae:0b:7d:c3:55:61:27:74:2f:3c:be:b5:e8:f2:
57:fa:8e:f8:4b:30:65:42:a7:f5:f8:08:2e:b3:c4:
4b:07:41:b1:97:bd:f1:78:33:4d:c7:07:a2:1b:8e:
d9:2e:89:35:96:a1:23:73:fb:b9:85:bf:2e:a2:b6:
cb:06:f8:15:0c:5e:98:fd:d0:9b:5e:d3:30:3c:43:
90:bb:a4:eb:27:5f:fe:a9:19:0b:df:15:55:cc:a1:
d9:13:f9:0d:b6:e4:a3:91:ad:9e:80:ef:72:76:43:
f6:ae:a6:a2:16:bf:bb:bd:71:fb:4e:60:74:df:35:
f0:bc:b0:4e:70:03:5a:1e:30:57:42:a4:b3:66:e7:
59:3c:40:05:13:ca:3b:0f:bd:6d:81:3b:11:31:d0:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DC:B8:4E:83:BB:F7:37:74:04:76:B9:20:71:7B:01:99:82:0B:94
X509v3 Authority Key Identifier:
keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e2:fa:12:39:93:84:c4:42:b1:d9:8a:55:95:1d:fc:cb:78:
7b:87:02:21:42:7e:4c:b4:d6:2d:b8:96:6f:42:45:5c:98:15:
9f:70:44:61:42:0c:16:43:e9:ba:b2:67:22:f6:b3:b3:eb:56:
5b:0f:8a:d8:1c:8b:9f:62:40:ac:81:92:73:36:69:55:48:cc:
b3:3c:26:8c:45:45:8a:9b:51:b3:52:aa:9e:bc:a0:1c:ca:7d:
eb:13:c2:37:48:0a:7a:7e:40:82:25:d8:98:d6:08:27:a0:f5:
ff:92:35:62:a5:f9:ce:85:9e:4e:25:82:20:6c:8d:b4:33:9b:
cd:ed:d7:e1:fb:60:8f:04:02:a6:db:5d:8a:98:b1:b1:3d:70:
9f:c3:7e:a3:33:fc:6a:18:b5:db:6b:db:c1:52:d5:46:54:7e:
cf:85:34:2e:60:63:29:c6:c6:22:71:42:f6:d8:2b:71:89:07:
42:d9:98:44:6e:66:a9:6c:0f:ac:7a:83:2f:c7:33:a5:d7:c8:
12:20:5e:9b:da:de:30:5c:89:eb:0a:ca:89:f0:67:fa:6a:a8:
2e:e6:54:7e:41:d6:be:8b:56:04:89:ee:cc:e3:a4:f8:43:80:
cc:e8:a8:7a:7e:32:9f:4e:33:1d:52:e1:7f:7b:6b:26:ad:e5:
12:1f:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:15:03 2025 by rpki-client