Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier: 3iN8mFy50FcTtHpDQWKfrZfQDTbVRrHIHsY1/UHFgCI=
Subject key identifier: 7C:72:24:AD:E6:7B:43:FC:C1:67:94:55:9E:92:3A:15:4F:78:35:26
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 019775D316A9200B42EDF4445212A3A6D9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number: 1285
Signing time: Sun 15 Jun 2025 23:00:57 +0000
Manifest this update: Sun 15 Jun 2025 23:00:57 +0000
Manifest next update: Mon 16 Jun 2025 23:00:57 +0000
Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
2: 6C2BEepiCaQMVtCkyhz30xXe8YE.roa (hash: LcW+0th7kvny6qypqSlzBgTR2tOOaIncb1qlmtnhBg4=)
3: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
4: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
5: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: an8uckdm4j5F1bQBG+kIatZvaT4bEGOm2gO5V3T0HGE=)
9: vBCHQIvxYnn49XpOGJSE4wjSlGw.roa (hash: 7CO1i5aTkd/bHcAyF+TmsIBuS1Bs7EA5n3iwLviSKeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d3:16:a9:20:0b:42:ed:f4:44:52:12:a3:a6:d9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jun 15 23:00:57 2025 GMT
Not After : Jun 16 23:00:57 2025 GMT
Subject: CN=7c7224ade67b43fcc16794559e923a154f783526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:03:2d:b6:82:44:5f:7d:9f:7e:9c:92:87:
ac:30:13:51:cd:8e:4f:59:be:af:06:ec:52:8e:62:
4c:81:ca:1b:57:cc:4e:80:14:f5:a9:0e:d2:4d:3d:
bf:65:16:06:69:0e:f4:23:46:ce:07:7a:bc:49:53:
5c:1a:37:87:70:77:4f:c6:0b:95:b5:de:9a:d1:c8:
67:7f:60:c8:2e:85:cd:2f:d6:22:85:80:09:6f:71:
6b:b6:b1:ad:86:4e:25:76:4e:03:f8:6f:55:13:81:
4f:2a:21:6c:e0:a9:8b:80:e8:c6:a4:c8:ab:dd:f8:
0c:f2:a3:20:73:f9:62:47:f9:ae:4f:57:98:be:95:
85:0c:66:67:1d:83:1c:60:7c:6d:45:4b:34:36:82:
32:73:99:bc:be:f2:2f:4f:9f:a4:4f:ae:a1:a3:79:
21:91:39:cc:2f:67:18:82:b3:ab:75:97:73:19:c3:
cf:85:d4:98:b1:f7:0e:56:71:1f:a0:b5:8c:4a:73:
85:a9:81:06:f0:a2:31:82:16:35:e3:43:51:e3:60:
fd:fe:38:c0:1f:dd:44:1f:34:c9:f1:8c:6e:58:ca:
40:a1:88:96:cc:bb:7d:0c:15:e8:ea:71:7a:0b:f0:
f9:6d:c7:f0:61:1f:4a:51:84:df:3e:7e:ee:f4:7c:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:24:AD:E6:7B:43:FC:C1:67:94:55:9E:92:3A:15:4F:78:35:26
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:ab:3d:16:08:5d:f0:9a:0d:bf:46:a7:29:c9:8f:2f:ad:
c3:fd:13:8b:6b:a9:da:43:2b:79:1d:1d:bc:88:58:95:f6:58:
4f:10:ba:d8:5e:e8:4c:d8:42:7e:20:af:0c:7a:c6:94:ab:d9:
e0:a2:f0:f3:20:08:e6:b2:ac:9e:60:ea:8d:d1:79:96:59:70:
ec:70:57:07:e4:56:4c:51:ce:d3:cb:5c:0c:7b:da:f6:ed:c5:
6f:b1:9c:5c:63:28:9f:2b:d8:6e:e8:f8:38:15:4a:af:23:3e:
84:db:8e:7e:4b:6e:de:1e:d1:bf:2e:e6:c8:ab:a8:3b:32:bf:
93:1a:aa:52:0b:0f:7f:d9:11:20:7c:47:9d:e0:c4:07:d6:7d:
79:e4:f0:90:08:05:83:c2:9f:b8:e6:ee:8e:f0:8d:f1:cc:f8:
ea:49:32:e7:c1:02:51:3e:21:64:ab:27:5a:53:17:6f:ee:d3:
f3:71:ea:79:a7:4f:1d:fc:07:5f:d7:1b:3a:cc:40:59:0e:bc:
5b:a0:15:12:43:5b:7e:ef:d5:36:36:55:bb:8b:9d:d4:d6:ca:
81:ed:34:3d:bd:b6:8d:c4:2e:bd:b8:62:0b:18:bc:92:45:15:
44:a8:9f:33:e5:58:4a:60:c2:70:81:36:8f:46:7e:e0:9e:a4:
f6:01:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:30:41 2025 by rpki-client