Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: dq79U87gkuzvbSAezfmAkw4XzHDpzS+LtfQwwyjbd9M=
Subject key identifier: F1:5A:AE:92:D1:57:EE:34:7A:5D:2E:73:24:29:A1:E0:9C:0E:6E:A9
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 0197B6D7B7827A269B516F6D40F76BC13DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 10F8
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: TaucGDCEmhV52g03Vikzsi2eazSj1dsYi+7bC2XlzfM=)
2: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=)
3: zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa (hash: krJTySa4xAIWcd+RLsqPBRipwsimqCaZxlGeTrQ72GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b7:82:7a:26:9b:51:6f:6d:40:f7:6b:c1:3d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=f15aae92d157ee347a5d2e732429a1e09c0e6ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:11:1b:19:dc:b5:5c:98:3a:6d:be:db:3a:
4f:ba:f0:eb:65:3f:d5:66:d9:aa:48:4a:e6:12:b5:
5f:64:9b:98:a1:45:d7:bf:d6:68:e5:95:ab:16:1b:
23:bc:7c:78:cd:45:e7:d3:de:33:f0:0c:9e:9b:92:
d5:70:08:8b:f8:51:75:dc:f4:e9:40:1c:d3:d4:32:
9a:82:f2:c1:c9:1a:05:62:fb:10:e5:67:5a:b4:45:
d7:a2:ee:34:6e:09:2f:e2:b7:ed:1b:8d:77:2b:d6:
20:3b:d1:e1:42:73:cd:7e:84:96:88:2e:22:e0:24:
01:87:ae:e3:a9:25:c2:fa:32:2b:75:92:41:1b:c8:
31:58:bb:31:cc:d0:9d:d8:6a:26:30:bb:51:9e:0a:
66:cc:d7:04:b2:da:3f:51:d4:97:81:b5:67:c9:f0:
9f:62:e4:0d:68:1c:bd:5c:34:83:20:0a:00:fb:a4:
94:45:53:03:16:01:77:5e:55:10:6f:46:2e:44:24:
d2:3e:f3:de:3f:9a:4e:75:de:eb:a4:48:e5:5e:0d:
38:4e:70:bf:fb:50:a3:52:64:8e:0a:ca:bf:c9:d9:
34:45:54:32:78:1e:a9:21:4d:f7:fe:6e:a6:d5:67:
b6:b1:a1:1d:3f:22:55:1c:8b:1c:4d:d2:e7:2e:8e:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5A:AE:92:D1:57:EE:34:7A:5D:2E:73:24:29:A1:E0:9C:0E:6E:A9
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:34:c3:fb:fd:79:9c:ee:7d:cd:1b:2c:0a:06:dd:b4:2c:30:
78:9f:18:f5:11:a0:6d:e2:bb:78:67:40:96:9e:90:d6:94:a8:
b6:20:ea:21:d0:44:20:b4:80:06:f7:59:c4:77:76:8e:ab:50:
de:b1:fa:c1:eb:6d:6b:64:23:e4:78:91:c5:3e:9e:0b:da:0c:
92:3d:96:90:64:a4:13:38:b0:94:26:05:02:1c:4a:81:0c:55:
c9:be:bf:6e:45:d4:11:67:f2:e8:16:f0:85:bf:16:a8:84:8c:
1d:64:7b:f3:b2:42:90:df:ec:36:e1:de:1b:a2:ad:54:64:b6:
0d:a9:b7:fd:57:4c:f1:fd:67:b7:ac:49:5f:d5:8f:b8:e8:46:
79:91:b7:ed:c9:0c:a7:ed:71:2a:45:7c:36:1a:31:b5:e3:80:
7c:f1:d0:45:42:aa:39:53:96:ec:3a:ae:1a:c3:5e:c5:ee:35:
09:da:e0:3c:50:5c:5d:2a:47:a0:02:a2:ce:29:84:a6:f6:a4:
34:96:80:24:ec:f3:06:58:89:9f:40:dd:84:b1:d2:d6:c5:95:
28:61:f1:08:ea:c8:c6:77:71:a6:e5:ff:1d:77:0a:dc:eb:3a:
3b:35:df:8b:52:01:1f:c8:e5:4b:ba:1b:3c:04:ba:6a:a8:c7:
f7:bb:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:00 2025 by rpki-client