Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: 8+sJz5yM/9P9VpjlWEi5BRTBFYLYUWlIDYdMdgvho6c=
Subject key identifier: 1F:22:A7:47:69:F3:1F:B3:4D:B1:1D:9E:2E:0E:E5:B1:E0:C3:C4:79
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 0197BA7DBC056EE0C7C534030A2BC0C62855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 07:01:31 +0000
Manifest this update: Sun 29 Jun 2025 07:01:31 +0000
Manifest next update: Mon 30 Jun 2025 07:01:31 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: x4V4aHVeFlyp3FrjDT5vsk93F8/eu4nhU29yXnz0gGQ=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:bc:05:6e:e0:c7:c5:34:03:0a:2b:c0:c6:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jun 29 07:01:31 2025 GMT
Not After : Jun 30 07:01:31 2025 GMT
Subject: CN=1f22a74769f31fb34db11d9e2e0ee5b1e0c3c479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:8f:f4:da:07:43:c0:38:dc:c5:bd:ff:65:
a8:a9:45:ac:22:54:bb:3a:5b:b3:b5:43:66:11:4c:
16:dc:40:36:62:b8:21:24:ea:80:08:92:82:e5:2a:
b6:e8:d4:0a:01:de:b3:03:47:48:33:d3:9d:83:d5:
a7:3f:ec:02:91:a8:c1:52:c8:bc:cb:2b:e8:23:12:
5d:0f:1a:45:03:f4:cf:1d:96:c3:b0:9f:da:b0:a6:
22:23:83:d1:4f:b2:f0:f8:75:23:0d:2c:a5:1a:c0:
9b:15:b2:d5:24:04:b6:2e:8c:bf:1b:86:4a:f9:74:
67:19:de:3c:26:d0:f5:9b:19:fe:6b:29:02:3f:d2:
da:af:e7:df:04:4d:45:15:3a:65:1d:ac:0a:22:be:
ee:7c:9a:f5:5b:70:52:72:97:58:1f:83:dd:4b:6b:
17:ef:63:d2:ea:1c:61:1c:0e:9e:53:2f:84:a0:92:
43:f7:94:38:14:7a:46:d0:e7:8b:c5:9c:cd:7d:5b:
95:2a:57:2e:04:bb:36:77:38:04:8f:c5:aa:32:f0:
7f:6a:a0:07:a3:4e:79:d7:80:fa:e5:38:31:42:e1:
74:ef:d4:e4:8a:a5:b6:3d:7c:ad:3d:e1:03:ae:83:
83:4d:67:77:17:d7:7f:a9:4e:68:16:0d:07:18:eb:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:A7:47:69:F3:1F:B3:4D:B1:1D:9E:2E:0E:E5:B1:E0:C3:C4:79
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:28:b1:a0:03:2c:5d:3c:18:e5:11:bd:5a:67:43:c6:04:94:
95:e1:a5:ba:e9:55:ad:5b:57:7a:25:fd:26:5b:88:5c:49:65:
f4:b2:86:b7:f6:c5:96:d9:38:9c:d7:27:60:b0:e2:f0:92:0d:
2f:c8:e3:de:da:e0:39:05:9c:dd:f7:e6:87:0a:4a:bd:30:08:
eb:0a:16:0d:72:ac:f8:64:b7:37:b5:cb:9a:d6:5c:5e:dc:a5:
cc:44:c8:16:a2:83:60:8f:b8:12:51:0c:b8:af:f5:3c:df:10:
1d:6d:c3:1c:9b:1f:7c:24:eb:9d:c1:e4:94:db:bf:bc:bd:75:
ec:db:4c:3f:e4:b5:eb:75:3b:39:d4:02:ba:ec:0e:af:ae:e8:
c5:74:7f:80:9a:49:9f:5d:1b:54:f3:31:dd:0f:83:33:bf:e9:
d4:10:47:dc:78:7a:63:b2:c0:e7:96:7d:07:6a:39:2f:0b:47:
41:32:1e:54:d8:a2:a8:9e:3c:e9:f0:34:f8:1c:c1:42:e4:8a:
c3:b7:4a:c4:93:42:84:93:72:f2:dc:7e:08:57:26:a4:a0:a2:
f5:e0:c1:70:a8:66:9b:9c:17:4e:86:f6:95:3e:db:ea:28:c6:
53:d3:ae:8c:ce:87:3f:01:e4:d0:a5:9e:d3:e1:16:1a:b8:53:
89:bd:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:54 2025 by rpki-client