
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
File: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft (raw, json)
Hash identifier: ZKTcr90dlthZrlte8Jd0nOfrGFuaZ8MhdW9EKBU6IJY=
Subject key identifier: F8:C9:47:77:19:23:4F:B4:F0:8A:79:B2:64:F5:B0:A4:36:5C:70:FE
Authority key identifier: DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
Certificate issuer: /CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Certificate serial: 0197B70F47D7076A1C884DA6F36B125B3A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
Manifest number: 56
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl (hash: VFnGUrmMkhRZr87AHOGFh9oJEqxzKz97KZyxN7X8Drc=)
2: ttiSctxtKk--_TjJLyKyxsLTH5M.roa (hash: cExQTThTOKNeo7f6JBcYKDPiMo9ejsGy+rMa2dC0A4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:47:d7:07:6a:1c:88:4d:a6:f3:6b:12:5b:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=f8c9477719234fb4f08a79b264f5b0a4365c70fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:07:b7:30:88:a5:3a:73:98:cc:fd:9e:ff:
47:32:41:b6:10:4b:f3:38:d7:83:d8:25:92:fe:40:
0b:ba:e7:45:e3:34:dd:77:67:dc:41:d1:4c:39:34:
94:4c:30:91:77:d8:1f:f5:c4:55:09:02:a4:c8:44:
98:36:01:b5:c8:d4:44:8e:7f:58:8b:ab:1f:6c:c7:
c3:a4:7a:58:6e:d9:55:73:b7:de:c0:22:1f:06:28:
91:61:51:0e:e4:57:4c:cd:a4:54:94:98:5e:9a:e8:
6a:20:c6:d3:a4:fe:80:cb:37:11:17:bb:e7:5b:2f:
8f:f2:c9:a4:08:c2:b6:6b:ae:db:53:1a:e1:e1:a4:
97:ac:cd:a0:c8:f7:ff:00:56:c4:a7:db:3e:71:22:
a9:8e:7f:e8:6b:67:bb:ff:e1:28:73:9a:8d:c8:d9:
71:59:07:56:04:93:40:20:dd:ae:4d:cb:ee:fc:61:
6b:bd:c5:29:35:94:85:16:42:2e:f0:7f:1c:8d:c8:
8c:cc:cd:93:e6:0c:3d:89:9d:69:bb:71:cb:c0:ea:
e8:92:d0:98:22:a3:27:2f:c6:80:31:5e:26:52:10:
c8:af:2f:cb:8e:95:38:b3:99:e0:c4:09:0e:1e:cc:
3e:5c:0e:3f:a8:43:d7:ad:78:9f:49:a3:46:a9:e1:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C9:47:77:19:23:4F:B4:F0:8A:79:B2:64:F5:B0:A4:36:5C:70:FE
X509v3 Authority Key Identifier:
keyid:DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:3f:bc:af:b0:67:25:9d:20:69:40:5e:16:1d:da:dc:1e:76:
37:0f:ea:99:87:e4:c7:9f:21:14:83:07:aa:19:f8:e5:ed:45:
6b:26:24:91:a6:d0:2f:f7:71:76:a1:be:c3:b5:76:26:77:27:
45:44:47:f1:8a:57:4f:31:5b:66:95:ac:53:06:66:c3:52:35:
b6:28:fa:6e:71:10:f0:ae:f1:87:f3:11:f6:35:f9:84:b4:b2:
58:44:08:4f:22:89:7a:a6:3e:8c:5d:7f:c5:5f:1b:78:c2:f6:
01:0d:53:f1:b9:9a:04:b7:95:a1:03:ff:fd:2b:1b:79:69:24:
ab:48:f3:23:69:9a:7e:9a:9b:9e:06:39:67:9f:1f:f1:80:d0:
90:1d:68:b9:4a:05:2a:37:42:8b:b7:a5:95:b9:a7:29:35:c9:
80:c8:f9:df:27:c2:05:6e:9c:70:85:cb:8f:51:5a:40:00:16:
0b:e4:68:35:ce:bf:9d:47:5e:d0:7e:42:c3:50:f2:47:ef:8b:
0f:09:a0:14:5b:82:c7:ea:b5:fd:8a:fc:88:25:f2:6f:6c:b9:
b9:5e:75:61:98:c9:28:89:b0:5b:62:35:af:9d:96:e0:a4:b1:
f5:68:47:8c:cd:0d:65:4c:f6:cb:62:54:81:c5:50:6b:0f:83:
97:af:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client