Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: cNpr/wsBaLcixIgjfWUzQzuuugmIW88a7ku8JatITLM=
Subject key identifier: F0:B1:E1:86:DE:DA:A6:E8:DE:95:AE:02:99:E9:A8:5D:3A:3D:FE:5D
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 01978C23E1C2D6D2980B0F2CF1BA1216A54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 159F
Signing time: Fri 20 Jun 2025 07:00:51 +0000
Manifest this update: Fri 20 Jun 2025 07:00:51 +0000
Manifest next update: Sat 21 Jun 2025 07:00:51 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: 0n7Rd3L43K2gL+14eTgR98AEhUkHqne9wH+MxuFyzdQ=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:e1:c2:d6:d2:98:0b:0f:2c:f1:ba:12:16:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Jun 20 07:00:51 2025 GMT
Not After : Jun 21 07:00:51 2025 GMT
Subject: CN=f0b1e186dedaa6e8de95ae0299e9a85d3a3dfe5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:c1:d9:2b:eb:39:6c:88:73:6b:b2:9d:6c:
d8:e8:f7:52:e3:7d:d4:00:6f:48:e0:69:85:a7:a5:
6f:81:06:24:c4:ce:26:5d:2c:3c:df:61:e8:8d:7a:
17:02:11:56:bc:6c:eb:f5:de:53:7e:e9:88:8a:c8:
2c:05:d6:f4:2f:de:b9:ab:1e:f3:cb:8e:22:d0:77:
34:a1:42:35:15:ec:99:cc:1c:1a:39:2d:ad:c7:dd:
63:fa:a2:9f:7a:74:9a:cf:b6:30:d1:e6:6f:29:12:
06:3a:37:ac:84:2f:89:8a:63:fc:e2:20:e6:e5:ac:
d7:c8:1c:7c:6d:d4:32:77:8a:94:c4:07:d3:06:79:
1f:1c:f3:bf:5c:b2:11:5f:5f:71:9f:37:c8:b7:9d:
6e:e1:30:27:54:25:ee:2f:81:51:de:93:21:a0:b9:
3d:eb:f7:18:8c:26:70:02:83:38:b1:74:30:0f:ba:
28:a4:b7:97:77:bd:52:2d:4d:d5:58:72:1c:8b:60:
ca:16:3e:15:88:94:42:eb:03:1a:18:ae:4f:0f:d9:
6d:76:0a:4e:76:a0:0b:c4:e6:52:f2:ac:fe:5e:12:
a6:ae:c9:94:24:b1:d3:5f:bf:c9:eb:4b:55:0d:59:
3a:52:f9:fe:b9:db:79:04:d5:fb:ed:6b:32:a0:9d:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B1:E1:86:DE:DA:A6:E8:DE:95:AE:02:99:E9:A8:5D:3A:3D:FE:5D
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:27:02:0b:ec:bc:35:40:4c:56:86:fb:40:61:f9:cf:10:
bf:ef:03:1a:0e:b0:53:59:f2:f1:79:ac:92:02:54:05:5e:cf:
78:76:62:77:a6:47:2f:0e:22:e8:4c:b8:ad:d6:2d:cc:ac:84:
48:ad:ee:75:68:0d:b7:ae:04:66:49:01:6c:d4:b3:ff:7c:59:
4f:b4:5a:d5:09:03:19:df:ca:c2:01:ce:10:30:91:0a:f7:af:
b7:40:33:b2:6a:b1:10:ba:93:07:21:8a:dc:81:65:64:4f:51:
1f:20:f1:75:8d:05:07:87:02:26:92:20:5d:44:49:9f:54:d1:
c4:6f:51:75:fb:df:06:4c:ac:c2:9f:ff:bc:c8:5e:6e:b9:e7:
08:84:07:55:e2:7c:49:8c:d6:16:80:32:a4:b6:a8:c5:b2:c3:
7d:85:ab:f4:9f:1c:6a:09:c1:56:60:81:a8:a9:00:6a:e2:d2:
38:02:a6:61:9a:1f:74:3a:d3:a9:40:7c:5f:44:c0:fd:28:a1:
ff:ec:cf:92:c5:b3:05:13:1e:de:52:67:75:21:03:23:2a:d8:
e6:7d:f1:09:97:83:ab:45:f9:e5:70:82:16:27:0d:bf:4d:eb:
00:eb:b1:49:16:13:f8:4d:93:a2:d5:35:8b:5d:c5:bf:10:0e:
fd:b8:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:16:19 2025 by rpki-client