Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: gZ4nfXgq7c3mwOx/Y97l50VZKxsDJAJXpNrDjpgUIQ4=
Subject key identifier: BC:69:34:61:83:78:BE:E0:F3:82:AF:C0:DA:85:F8:DC:D3:DD:0E:93
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 0197B7B33AB167F7941DE47960471101399E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: 0/TTCFi0ungNNdrP/V0k93xEZa5kFC68YgJrxiIQYRU=)
2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3a:b1:67:f7:94:1d:e4:79:60:47:11:01:39:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=bc6934618378bee0f382afc0da85f8dcd3dd0e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:a2:22:61:2e:31:a2:94:36:1d:18:0a:78:
44:d3:69:e9:dc:b2:5e:4f:4c:51:fd:de:30:15:bc:
04:4c:e9:c4:2b:2e:67:ee:d0:4d:6b:df:d4:32:f8:
c9:16:05:12:b5:dc:21:7d:b0:75:0b:5c:a5:95:bb:
02:0b:71:84:b9:1e:ab:9d:91:91:83:0a:ec:aa:22:
40:17:59:14:97:2f:29:cd:a8:27:5e:fd:bf:7d:0d:
0b:00:c5:f0:b2:33:dc:c4:07:db:f6:04:4d:67:58:
83:c9:32:a5:cc:83:6f:f1:6c:8d:53:97:09:8e:24:
8c:9d:07:a3:6c:db:b2:9c:34:18:98:84:9d:f5:70:
73:b5:61:58:28:c8:37:f5:35:32:b2:25:e8:0c:ff:
6c:56:16:d5:e6:c5:27:2b:50:f9:51:23:39:66:ba:
03:2c:2b:34:81:c1:d0:2c:92:18:4e:c4:cc:17:70:
58:c1:34:24:96:7f:3c:6c:b5:37:92:8f:98:08:34:
9c:e4:19:09:7e:96:95:b9:40:00:f5:74:4f:82:ec:
10:4c:0c:03:f6:16:29:d7:cc:ce:f2:96:0c:ed:4b:
dc:1b:47:03:b9:ab:88:ac:89:40:b0:6f:7d:31:4f:
48:de:d9:29:a6:55:03:32:8a:11:39:c0:e3:05:6a:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:69:34:61:83:78:BE:E0:F3:82:AF:C0:DA:85:F8:DC:D3:DD:0E:93
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:59:68:87:ed:80:be:ef:dd:90:cb:8c:14:4c:a0:66:82:
d9:87:1e:66:01:a1:a4:90:6c:a4:21:19:6b:d8:d0:87:1b:43:
81:4f:af:13:53:ec:a2:6e:84:92:80:08:c6:22:49:11:ab:63:
09:9c:2d:30:2c:90:2a:5d:96:14:ec:0d:17:c2:66:c1:8f:8d:
80:57:86:88:53:fe:bc:7b:09:e0:59:a9:f0:a2:00:62:4b:7a:
b4:e2:58:35:5e:20:5e:fe:3e:65:91:12:18:8a:78:4c:7e:f2:
74:7d:58:e5:5c:07:62:99:42:78:bc:ad:a4:a5:47:e8:2d:c6:
25:1b:c1:bd:b3:95:c0:06:9c:32:3d:29:44:cb:b5:d3:64:e8:
12:4f:2c:30:f5:fc:21:ef:75:2b:74:ec:35:cb:f4:65:86:09:
b4:cc:5f:ed:76:0c:14:1d:97:f3:c4:5d:94:2e:e3:39:93:ed:
c3:96:77:86:6c:0a:f9:e5:e0:a3:f3:f6:87:cb:45:f2:8b:f3:
ba:46:2f:2e:a2:28:2f:f0:26:d0:f7:7a:e2:34:72:09:75:62:
4e:f2:b1:91:50:af:4f:ff:22:51:94:93:3a:99:92:cb:54:11:
5e:9f:97:d6:3e:22:b9:fd:4f:f7:68:8b:8f:bb:63:cb:a0:bc:
10:93:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:08 2025 by rpki-client