Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: lBTYvd4MoMmmtzpRZoEVVrfUJQtj2dHx7A8bPUDhQW8=
Subject key identifier: 1C:91:B2:73:43:6C:51:19:69:CA:93:71:69:50:2C:B2:0D:B4:3E:35
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019779B02541D0AAA2BE71CF659607921FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1415
Signing time: Mon 16 Jun 2025 17:01:16 +0000
Manifest this update: Mon 16 Jun 2025 17:01:16 +0000
Manifest next update: Tue 17 Jun 2025 17:01:16 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: gRmouzux811aHeGD5zzGcKN8S1SsTOfLXEKYERatj/c=)
2: NTq0FDzH2xxPaa-1hxtnePIlEA4.roa (hash: LRFHdSsVugdN6TwKBfGKGPR3Nf4KsaI4iw69J8bmMBI=)
3: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:b0:25:41:d0:aa:a2:be:71:cf:65:96:07:92:1f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Jun 16 17:01:16 2025 GMT
Not After : Jun 17 17:01:16 2025 GMT
Subject: CN=1c91b273436c511969ca937169502cb20db43e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:b5:af:97:e3:b2:fb:00:13:36:fb:b2:95:
48:12:17:b9:46:af:f6:da:96:95:29:86:e1:3d:b6:
5d:5a:f8:b3:bc:a4:77:a1:76:62:c3:dc:da:57:a6:
40:00:76:2f:69:1a:23:e8:12:72:da:81:38:0a:df:
72:86:bf:cf:dc:f3:e4:27:c1:07:74:76:62:3b:d4:
2d:0c:be:08:e7:47:0c:51:24:7b:07:86:9e:71:39:
2c:e3:a1:e9:7d:0e:06:1a:ce:f1:3f:5e:f1:7c:ba:
06:17:3e:db:93:a0:da:36:b5:b3:fb:82:30:97:6c:
2a:75:40:0d:39:a3:99:8e:a3:4c:d4:83:56:68:c1:
bd:39:21:8b:05:df:db:b8:8f:fc:cd:1f:a7:fc:db:
de:85:25:9f:32:2d:a5:16:ca:22:6f:a0:39:a1:c8:
ab:75:03:fb:4a:b3:04:c5:35:e4:07:73:64:22:e5:
ad:97:7a:92:c9:11:bc:1c:78:e0:be:e9:e7:ba:76:
56:19:28:76:67:93:c8:cc:98:8d:43:a7:c2:33:5b:
aa:7c:88:2e:4d:cf:c3:ce:41:95:21:2f:36:84:1f:
b9:37:62:72:27:17:ab:f4:90:7b:ec:3f:51:01:40:
a5:8d:1d:fb:ba:0e:dd:8c:21:79:9d:c8:03:d1:0f:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:B2:73:43:6C:51:19:69:CA:93:71:69:50:2C:B2:0D:B4:3E:35
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0a:97:4f:8b:0d:d9:b5:e0:e6:f3:95:98:66:c9:22:ad:a5:
c0:af:64:d7:9c:06:d4:14:33:75:82:41:3a:d4:2f:b0:46:58:
dd:9a:e2:1f:be:02:7b:ef:df:8a:cd:94:0b:de:1f:df:c6:9e:
6f:2e:36:81:a9:0c:e3:35:0b:23:df:d8:71:ac:79:48:d0:a2:
c5:16:c7:13:96:59:89:d1:03:c6:7d:f8:68:83:b4:98:88:93:
b1:99:06:bf:d9:a6:12:76:c0:7d:7b:c6:f6:26:83:de:70:8a:
a1:8a:76:44:a2:ec:ea:0e:d2:f0:af:ac:f7:12:ae:90:ee:d8:
04:d3:65:6e:39:69:05:25:c2:86:77:bf:04:b0:e3:f3:42:44:
9b:fc:a3:a4:4f:8f:b2:4f:45:d0:73:18:4d:dd:73:59:d3:10:
36:3f:69:72:7c:67:24:34:89:26:51:29:d8:91:01:c1:1f:64:
e7:a0:a0:99:cb:b6:60:9b:81:77:2f:19:db:8a:0f:eb:a2:8a:
47:f0:4a:45:c5:2c:b3:c6:10:14:b5:7a:bb:a6:9d:df:d4:49:
17:b9:54:e2:9b:c0:f0:6e:cc:9c:7e:f8:d2:b9:c1:bf:c0:b6:
f6:23:3f:52:da:1f:4e:d9:6b:4e:ff:cf:03:21:14:72:e9:35:
f6:b9:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:10:55 2025 by rpki-client