Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: tXpLKQJL65n2Z9zgxY1dgA4jMHA8Y2M4KRoY3vPvXyM=
Subject key identifier: FB:F9:E2:D6:64:ED:95:D9:FC:13:39:5C:E2:E3:EE:BE:AD:63:A5:BB
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01976D066E1AA23F945FCE75BAC3358C23C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 06:00:27 +0000
Manifest this update: Sat 14 Jun 2025 06:00:27 +0000
Manifest next update: Sun 15 Jun 2025 06:00:27 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: lBBmRhiYu3Usnhq982thF268FoeGNY6slVBvRmctDXM=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:6e:1a:a2:3f:94:5f:ce:75:ba:c3:35:8c:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jun 14 06:00:27 2025 GMT
Not After : Jun 15 06:00:27 2025 GMT
Subject: CN=fbf9e2d664ed95d9fc13395ce2e3eebead63a5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:30:09:11:b3:d7:eb:1b:a6:33:03:dc:d3:
95:5a:5e:a3:41:24:30:28:1b:46:af:4b:1e:1c:6f:
f7:d4:bf:64:96:ec:bb:75:49:d3:93:75:fb:89:48:
c9:0d:7d:85:9c:52:50:e5:58:c0:fa:cc:0a:96:a4:
97:66:85:ee:fb:ce:d5:54:72:8b:b2:f4:bd:6d:3b:
47:41:de:eb:07:1f:22:06:9b:ed:bf:d7:63:b5:b9:
37:eb:38:74:86:fb:30:83:ed:f9:af:de:e6:3e:8c:
2c:07:47:6e:cc:22:24:21:8f:04:d3:c3:b9:dc:fc:
d5:a0:d0:9f:0c:32:67:c4:94:4e:ec:dc:be:f9:82:
dc:0c:09:41:f7:bb:14:0f:14:8b:d8:22:7f:59:ca:
70:f7:3f:a1:34:9b:b2:0c:e1:b0:6f:c2:fc:3e:c4:
53:88:7c:2f:cf:c3:4a:6c:2b:ae:41:98:b9:71:15:
02:57:40:86:50:0b:c8:eb:0e:28:e9:1a:8f:ed:c1:
96:4d:29:83:8c:b2:9c:23:85:81:14:3d:c6:2f:4e:
ef:87:ef:8f:0d:dc:7d:20:ff:d0:9c:0d:db:cf:d9:
b2:21:50:1a:d5:f8:9f:48:63:66:41:09:82:97:e8:
d5:a3:90:90:33:6e:6f:f2:2b:aa:5d:58:f1:53:a6:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:E2:D6:64:ED:95:D9:FC:13:39:5C:E2:E3:EE:BE:AD:63:A5:BB
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:db:67:d6:f7:23:ed:cb:04:b7:7c:cd:90:43:c1:dc:43:a0:
bb:12:1b:f2:84:a7:93:1b:24:62:b1:77:71:77:9f:ed:84:a1:
ba:ea:ea:0b:5f:d5:6a:06:94:ee:71:2e:b9:b6:d1:32:fb:df:
5c:c0:d6:0e:5b:b8:ba:54:70:16:5d:6b:f4:a3:0b:cb:44:bd:
0d:2a:8d:f6:d2:3e:86:d7:6e:8a:1c:17:42:44:10:c1:b1:6e:
3e:a4:15:52:11:79:cf:03:2f:9a:75:5d:6c:a0:9d:c5:e1:3c:
39:f4:a6:de:41:35:39:88:b5:08:16:18:f8:7d:9b:7f:ac:04:
ab:eb:d9:f3:bb:b1:66:83:14:56:7e:6f:63:7b:c7:6b:d8:dc:
a5:6c:16:c4:75:7b:9d:70:1f:0c:90:0c:90:fe:f0:65:52:56:
ea:a3:26:fc:ab:9a:47:81:95:fb:29:42:e8:25:fb:61:de:fe:
fd:9f:00:d7:46:72:fe:ec:45:37:a3:b3:75:a3:03:3d:37:73:
bf:a1:fc:2a:db:a1:95:60:a0:91:a9:63:4c:31:7f:4a:3b:ce:
c6:25:59:3d:c7:00:5a:54:a6:72:85:70:c0:c9:95:05:08:04:
1c:c8:e0:c8:ec:7c:17:68:1a:48:40:8e:78:e1:0e:64:4f:d8:
f4:33:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:48 2025 by rpki-client