Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: 7Lgs/Rlxo27F2G60B1UeWtOfdVgPDJNXVXV5UmQ7Trk=
Subject key identifier: 60:7D:CA:23:F3:95:69:AC:76:74:33:60:45:C7:42:54:5A:1E:71:5A
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 0197B6A07EDAD3802B4B1B57EF1C530B332A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: vBwr5lnWE4B1iMCcEffJjn7fFNviSaunnHWbLCeSwlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7e:da:d3:80:2b:4b:1b:57:ef:1c:53:0b:33:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=607dca23f39569ac7674336045c742545a1e715a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:03:b8:1e:4d:33:58:d9:f5:7c:17:3b:8c:
54:e6:d2:33:6c:3d:05:1d:46:d3:20:2d:bc:7a:d9:
bf:e4:41:81:c9:52:20:56:1f:3b:64:e8:b2:ab:3f:
7c:2d:c6:e4:96:50:dd:78:0b:78:02:d2:99:2e:6a:
90:ed:8f:94:a7:e5:e5:4b:32:68:d4:6e:43:57:cc:
99:c6:79:6d:b9:e8:e6:e4:74:fc:69:c6:08:a8:0b:
26:d6:0b:43:ba:67:3d:20:4d:0a:bf:71:4a:ff:0a:
95:85:68:bb:98:33:f8:8c:46:73:c3:92:f1:c8:7c:
6c:a7:34:23:95:05:d4:8c:11:57:9a:81:15:cf:6a:
ce:73:4a:52:c4:7a:d9:83:25:84:e7:11:4a:a3:cc:
28:06:fb:d7:1e:d6:a4:13:73:f7:fc:08:51:e0:21:
dc:13:ef:79:46:98:96:6e:55:7e:2d:37:bc:f5:e2:
51:16:e3:13:93:7c:ac:3f:71:29:ea:4c:44:06:63:
f7:88:f7:af:36:c4:6d:df:7d:a5:76:37:90:6f:22:
74:d5:d2:31:c0:16:43:61:da:4d:62:9c:48:1b:34:
a6:de:68:9a:fb:f9:74:58:22:0f:8c:3b:21:d3:f1:
51:50:6c:cb:73:b1:bb:79:22:90:e1:9e:33:08:1f:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:CA:23:F3:95:69:AC:76:74:33:60:45:C7:42:54:5A:1E:71:5A
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c1:2a:98:9f:46:e6:7e:7c:da:cb:98:74:fe:db:ed:fa:9a:
a3:f4:23:47:66:ce:f5:73:74:53:00:0e:07:7e:7a:1a:e9:c9:
e4:28:f3:1e:a9:05:fa:75:d9:ed:00:e8:de:25:72:a4:45:9b:
11:20:c2:40:91:64:26:3f:bb:64:0c:95:47:2e:ca:e9:5a:32:
db:bb:63:a0:73:a8:4d:a7:e5:8f:b5:79:32:4f:7d:d6:25:b9:
aa:f8:4e:4a:ea:65:a3:f7:30:90:cf:4f:f5:a7:52:28:ce:0f:
09:7f:95:3f:a1:e5:99:7b:bc:55:02:84:18:ae:0a:d0:99:0d:
55:4e:16:ca:ca:46:e2:5a:93:dd:ff:48:f9:c2:8b:2e:58:30:
dd:57:05:8f:e4:b8:0a:10:bc:ea:0d:0e:c0:0d:4d:48:44:d2:
81:63:13:f6:a8:9f:9b:9e:57:87:e0:e1:0e:2a:93:78:64:96:
4c:db:9d:13:5c:01:57:8d:76:8f:66:44:4a:cc:e4:92:c2:c4:
69:e7:75:b7:3b:e1:2d:83:cd:ad:db:6e:b7:36:27:78:3e:ca:
ce:6d:9c:9b:10:ac:87:55:f0:f9:d1:01:66:72:90:66:f0:83:
7d:ef:c2:ab:d2:5b:ee:cb:7c:ac:36:91:f1:93:3a:a5:43:31:
81:75:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:19 2025 by rpki-client