Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: tmODbeEyzBI7Ig79v9rFi2OzaZL3QDCG5xNeN0IuDlU=
Subject key identifier: 15:F7:EE:61:32:9E:CA:36:A8:65:16:39:D6:B8:73:74:50:DF:3A:A2
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019784A0C5413E627EE772C273A0D8F5067F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 147C
Signing time: Wed 18 Jun 2025 20:00:18 +0000
Manifest this update: Wed 18 Jun 2025 20:00:18 +0000
Manifest next update: Thu 19 Jun 2025 20:00:18 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: ZXil5wqZsJ2eH9tM4uQs6qM8eMMLLn36b8VrGR1Td4k=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:a0:c5:41:3e:62:7e:e7:72:c2:73:a0:d8:f5:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jun 18 20:00:18 2025 GMT
Not After : Jun 19 20:00:18 2025 GMT
Subject: CN=15f7ee61329eca36a8651639d6b8737450df3aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:2c:3b:54:30:e2:27:13:92:31:4c:db:33:
69:89:37:19:56:81:3a:f2:3d:d0:be:f0:3c:54:38:
fd:2a:c2:48:7c:0f:23:1e:f4:75:3c:0e:10:3c:f4:
02:ff:fe:db:b2:3c:cb:f7:ab:35:9b:ff:af:0f:3f:
1c:7d:5b:a2:a6:38:19:95:5f:9a:20:b0:c1:6c:07:
3b:de:3c:83:f8:82:10:21:d5:a3:6c:da:2b:dc:85:
71:d9:67:61:24:a2:3d:5e:4a:fc:c3:3b:38:f2:48:
ba:25:e9:b4:53:6e:60:6f:a4:20:22:8d:75:ed:d8:
3f:9e:e9:b4:7f:c4:ea:30:08:b5:fb:06:5b:7a:c3:
b6:ef:2a:d9:bd:08:d1:38:6f:02:3e:c8:52:03:06:
9d:1d:a3:9b:a3:b5:77:44:49:d9:17:ed:31:d9:32:
9e:5c:f7:a1:23:30:5b:21:a9:37:28:61:db:14:52:
49:81:92:88:ac:c0:25:05:0a:13:23:a0:50:ed:bd:
10:fe:56:5d:6a:1c:9f:5a:ea:43:b1:69:e0:2f:e4:
27:02:3e:8b:f2:db:cb:f4:a1:29:25:0e:65:ae:39:
ca:ba:e4:29:1b:65:d5:2f:21:d9:1f:c2:80:3e:91:
d3:ac:7d:e2:a1:61:e2:2c:bd:cf:6e:be:84:1e:f9:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:EE:61:32:9E:CA:36:A8:65:16:39:D6:B8:73:74:50:DF:3A:A2
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:40:88:3a:bb:c1:a9:29:47:0f:ed:c4:0d:07:41:aa:d9:
f2:d4:d9:92:f1:9a:c7:a0:41:b7:54:c2:46:0c:ee:e2:4f:e3:
c7:2a:ef:c9:44:59:d6:fd:f6:14:d7:ca:29:28:ae:40:1b:44:
96:b7:e7:ad:02:78:84:d3:73:2a:73:19:da:c4:62:f3:24:6f:
be:c9:41:c9:32:21:53:ae:b6:a7:0e:d1:9d:f8:8a:fb:ae:ac:
87:dc:67:97:eb:2b:54:eb:f0:f6:02:58:87:bc:2e:a0:67:23:
21:80:38:ef:46:e2:35:82:9b:12:66:3a:56:00:d8:05:ed:5c:
f2:04:f1:c0:7f:a0:a1:7e:83:ef:be:b7:aa:a4:59:ad:d3:4b:
68:ec:67:5b:61:57:49:4f:f2:c6:7d:b3:be:e7:7e:06:b5:f4:
6a:75:26:d9:35:87:b7:be:98:0b:03:34:ad:ab:e0:65:83:0d:
0e:d5:d5:15:f9:71:aa:49:6a:43:07:46:0e:00:9d:ee:9c:eb:
b5:aa:97:96:8b:47:e8:ee:32:84:05:d3:90:96:af:86:a9:f1:
14:28:29:97:d1:fb:7a:34:5c:5f:60:e2:ff:c7:ed:cb:d2:5d:
73:c5:ec:6c:9f:ae:12:4c:f8:5e:bd:15:48:66:61:0d:38:8d:
cb:b1:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:02:54 2025 by rpki-client