Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: 1nf7ZkDazZVkOI6QTvrayhoKUsGPRo0vG87t9XFBvxY=
Subject key identifier: 79:F3:DE:AC:29:15:12:47:72:04:8A:F4:80:93:5C:24:BF:26:42:40
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0197B6D748675FEDD5CFB8592673042D4D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 1056
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: JQzTZq53MZDJOkXv16MmhMyLxh24w5tdMVP6pq7vcHI=)
2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=)
3: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:48:67:5f:ed:d5:cf:b8:59:26:73:04:2d:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=79f3deac2915124772048af480935c24bf264240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:7d:9a:53:52:da:6a:c2:7d:cc:e6:c0:7f:
88:a3:33:14:b6:df:6f:70:61:da:eb:2a:b2:06:d3:
eb:30:aa:cd:9a:6b:12:40:a3:ff:ba:19:d9:c1:f5:
25:b0:1f:5b:3a:b3:c2:de:6c:e2:be:94:be:85:cc:
4e:66:80:0f:1c:b3:a4:2c:64:79:7d:cc:88:45:e0:
03:d6:7e:d9:f5:d9:99:04:82:a0:f4:31:be:fc:92:
a7:51:12:9d:50:72:9b:9a:87:e1:dc:7a:b7:56:5a:
79:12:54:2b:e3:67:ed:c0:4f:3c:3b:1c:12:59:30:
44:6b:97:49:42:34:5d:0d:c8:ad:de:29:b1:6c:0d:
fa:95:d0:6e:38:fa:77:78:25:09:b7:94:b4:cd:0e:
16:09:56:a4:e2:f7:70:2f:1f:cd:d8:3d:d9:f6:fd:
40:77:15:09:4d:33:dc:dd:1c:6a:7c:14:10:ca:e5:
70:32:9e:64:dd:7b:e8:ea:80:e4:64:f0:28:0f:1a:
8b:7e:b6:1a:5d:e7:b7:01:44:d8:89:4f:85:99:29:
5c:f4:3a:3b:08:6d:73:c0:2f:3d:43:09:2d:9f:04:
b2:c2:3e:de:2a:74:11:07:74:ab:c8:41:ab:61:bb:
f4:5b:74:32:db:49:2a:9e:d5:4e:67:a9:4c:52:4c:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:DE:AC:29:15:12:47:72:04:8A:F4:80:93:5C:24:BF:26:42:40
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:df:9f:43:c2:cc:bf:ef:ab:9f:8f:14:86:f0:d7:d7:a3:aa:
e0:02:c5:77:ad:f3:aa:04:ab:cd:eb:9d:21:24:98:f6:9d:fa:
c6:97:b2:06:7b:1d:83:d9:0d:0e:b9:1d:e2:e1:55:d0:40:01:
f1:7f:15:cf:bd:1b:f4:81:db:97:45:d2:9c:de:80:a2:41:07:
32:5b:17:c8:20:4b:b1:37:30:41:ba:45:a6:88:33:ea:d0:75:
b9:47:ea:ab:d4:53:18:9c:26:46:34:2e:66:7a:6a:88:0f:4f:
37:f7:fd:37:42:4b:7d:90:5f:d2:09:04:46:84:24:1b:dd:96:
22:f6:7e:9d:c4:83:38:87:63:6b:fd:73:03:6a:c5:2e:c7:55:
4a:ce:01:9b:75:12:ec:24:33:65:fd:7c:72:87:0a:39:29:45:
4b:06:d6:40:24:72:80:13:45:0c:90:06:86:13:e3:dd:46:77:
f7:7e:64:e6:b2:e4:8d:df:b6:6d:9d:88:82:bc:58:98:40:a3:
5e:79:78:6e:00:67:ab:58:57:5a:28:91:d5:59:77:e8:38:dd:
42:ea:9e:34:72:e7:17:9f:c6:db:cd:7f:ec:30:ba:40:41:bf:
e3:0a:76:83:af:e8:46:cb:4b:c9:d7:ee:fd:57:de:49:f6:ef:
d2:aa:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:13 2025 by rpki-client