Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: XKn4ULic0LkoLYx9Ip2t3gzJ3CeLSB74fYGbw5bkkoQ=
Subject key identifier: 6D:B4:FF:1D:4A:12:47:23:AA:DE:FD:08:0D:61:E2:73:72:A0:6B:14
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 0197B632C8FCBB6F1DB423973B3C6092C7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: AHQn+WG6BKp5xCXaNzPrClrwbCHRLJHmCcNuFtNlkvo=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c8:fc:bb:6f:1d:b4:23:97:3b:3c:60:92:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=6db4ff1d4a124723aadefd080d61e27372a06b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:3d:fa:76:ee:ab:51:3a:ab:5b:56:74:d3:
60:5e:ba:f2:64:aa:0e:2f:3e:d0:c8:f2:4c:38:b6:
8c:45:3f:ce:66:5a:27:bc:4f:21:82:de:00:ee:a6:
33:e5:c0:ba:6f:85:f5:3e:15:e2:75:8d:fc:c8:11:
ca:5a:0b:0a:61:0e:19:15:c8:f4:88:50:ac:2e:29:
fe:73:94:e0:5f:5e:1d:37:49:51:3b:e5:26:83:9d:
2f:6e:1f:d1:3b:7f:c4:fa:86:ab:68:28:79:17:e0:
20:a5:d8:65:20:f2:98:a9:34:e4:e4:a2:84:5c:01:
b6:13:0f:1e:97:a8:80:f5:b5:f4:cd:dc:8a:ec:d4:
7d:5d:0d:29:ee:af:93:84:2b:53:d0:63:b2:00:72:
ea:61:91:a0:56:5e:60:4b:c8:8b:0b:e2:6f:3f:e2:
ea:2f:39:18:51:e1:c5:0c:36:1a:b0:af:c3:aa:b8:
7e:3e:24:0e:2e:a7:1d:96:c1:81:67:c3:7b:2a:0d:
57:f6:19:f9:c7:ce:fb:fb:d3:13:ae:27:fc:39:81:
8e:9a:df:b2:8e:38:06:20:2f:82:73:78:e8:09:71:
2e:8a:29:96:53:9d:9c:cd:45:b1:e3:6e:2c:de:a6:
ef:c8:86:8a:b7:4f:1c:49:c9:61:41:db:0e:d6:c4:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:FF:1D:4A:12:47:23:AA:DE:FD:08:0D:61:E2:73:72:A0:6B:14
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b0:ac:83:bc:1e:67:c5:ee:4c:6d:92:00:d2:9b:4f:ba:5d:
dd:5a:ac:3a:2d:d6:9d:21:0a:b5:8c:66:38:42:fc:c4:5c:f1:
36:cd:bc:cf:22:fb:a8:ca:41:3e:ac:f2:63:ee:bc:82:be:03:
75:60:04:8d:e3:38:04:3a:ea:d9:65:79:76:40:d0:13:9b:24:
0c:04:d3:72:7f:58:56:82:85:ef:b7:3f:44:38:70:1e:00:6e:
f5:bd:c4:02:4c:62:bd:81:ba:3c:7b:d5:6b:e3:39:0f:e0:cd:
47:39:6f:20:66:29:16:f1:9f:01:5a:78:d9:33:a6:8f:b2:b3:
63:e8:77:0c:bf:f5:c7:63:fa:e2:da:4c:4b:5e:6d:49:a2:86:
77:22:77:e4:dc:2a:6d:e8:c9:e6:cc:01:4e:98:6f:fc:af:72:
fa:a5:88:dd:ec:4e:c8:b5:aa:eb:56:21:63:60:91:99:a7:1d:
ff:14:87:ee:dd:5d:55:6e:97:f5:f3:26:5c:61:3b:bb:ec:2e:
6f:1a:cb:c5:3b:17:81:08:9e:b3:53:37:1c:75:ae:2a:5c:e0:
77:4c:79:28:0d:8d:55:a0:e4:3b:e2:20:8d:0c:2f:88:fc:f7:
9d:94:a9:11:95:26:28:a0:3e:34:ca:6f:5d:cd:12:86:c5:35:
55:51:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:30 2025 by rpki-client