Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: GWXlNxhI6if5zhwoHq7Hj9vwrBX4yZ+lDFJzc1ueTzs=
Subject key identifier: 22:2E:BB:0E:BC:96:B1:97:3F:71:E4:21:57:8B:74:86:F4:17:C1:A3
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 01977564B89A98A0EC5478F19276502D686C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0341
Signing time: Sun 15 Jun 2025 21:00:24 +0000
Manifest this update: Sun 15 Jun 2025 21:00:24 +0000
Manifest next update: Mon 16 Jun 2025 21:00:24 +0000
Files and hashes: 1: P2UQcbFTLm1JjzHyScx5R1wasug.roa (hash: Nb4x4bENzybsdF+q1TgBVXUx3iJnvDGrhKB7YNtcTnk=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: 5vdvR/NGRbzW8hHkHmOSCg3uFNrF2M82JnQYBQrw+BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:b8:9a:98:a0:ec:54:78:f1:92:76:50:2d:68:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Jun 15 21:00:24 2025 GMT
Not After : Jun 16 21:00:24 2025 GMT
Subject: CN=222ebb0ebc96b1973f71e421578b7486f417c1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:c2:48:44:74:6c:4e:83:f0:27:2c:ca:92:
7e:b6:6a:87:db:a2:13:c2:9b:bb:4f:90:fd:af:ed:
19:ce:23:df:4c:12:96:5a:b2:a8:3d:d3:df:ce:9a:
8a:07:2e:db:2d:2a:5f:10:03:01:20:84:b3:5a:1d:
20:bb:fe:a6:97:32:26:01:59:33:a7:ee:b8:e2:dc:
ef:63:e0:12:c7:da:ad:ad:f5:11:ae:26:98:c2:43:
38:a6:ad:6e:56:c6:5e:11:bc:27:c8:79:3b:09:a2:
56:19:3f:28:a2:b4:7a:69:2d:f4:92:13:c3:15:d4:
43:ca:87:64:3e:1a:7e:b2:8e:db:20:a7:77:01:28:
06:e1:18:e2:de:b8:2b:c4:74:16:50:2e:a4:de:2f:
72:10:5b:7d:57:ff:57:49:7a:ee:c1:6a:36:1c:70:
75:f3:4a:1b:19:00:cb:1d:46:61:b0:e7:c9:04:33:
79:ac:5d:48:e9:b8:6a:42:f1:32:bf:70:64:fa:bd:
08:ff:9f:a6:ec:c0:d5:e5:17:cc:67:9b:dd:d0:85:
b0:27:49:4b:09:32:2e:19:98:7f:65:e4:46:21:8f:
69:fc:9d:7a:53:8c:61:1b:5d:87:64:26:1c:35:0f:
dd:2e:06:d2:56:0d:a6:32:b8:b9:61:00:03:8a:fb:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:BB:0E:BC:96:B1:97:3F:71:E4:21:57:8B:74:86:F4:17:C1:A3
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8d:7f:29:fe:38:09:ac:7e:f0:34:b8:3d:73:93:df:f3:b7:
3f:3e:40:3b:2a:90:fe:6c:aa:66:43:ff:5f:a0:8d:a4:9e:4d:
c9:4d:55:8a:ce:48:17:91:03:80:1b:50:c9:c4:0b:dd:89:e5:
f5:cc:ee:6c:c4:1b:6d:f3:ed:9d:ff:f3:b8:d1:d1:52:97:47:
1c:e7:0a:25:6a:8d:85:08:f1:54:61:49:08:28:e9:6e:2e:d3:
c6:08:b3:fc:bd:5e:7a:99:88:7d:2c:32:87:37:b7:94:b4:4e:
eb:80:c2:66:3c:c6:01:8b:c8:bb:b7:e1:52:19:21:15:ca:83:
57:63:fa:fb:f8:ad:99:36:8b:25:b4:c1:5c:1c:d0:30:f5:c5:
e7:bd:5e:6e:85:d2:53:0c:ea:bd:99:78:22:ed:8b:50:a7:f6:
87:cb:75:30:7c:fc:44:d6:f8:2d:58:77:07:8f:ac:3b:58:10:
dd:08:d3:fb:f2:58:3b:bb:fd:55:a3:01:d6:1a:a8:66:c0:df:
a7:31:88:37:4d:de:3d:74:8f:f9:35:4e:33:c2:94:df:92:a7:
51:6b:45:a3:96:e1:c0:89:72:8b:7b:38:f9:ff:f2:b4:8d:58:
b8:d5:58:1d:41:7c:0a:64:95:41:9f:cb:b9:ec:cc:97:c4:d7:
77:c8:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:07:45 2025 by rpki-client