Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: Q1/ks3KV/jmO3lHd4SpRltv7y42n0v2kTi23tVPKLYM=
Subject key identifier: 9B:FA:F8:D8:EF:3A:18:07:B8:DB:1C:C9:58:9D:BB:40:8D:47:56:32
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 0197B70EBBFAF216F7DFB29E8F98B56986C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0BB5
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: Vz3JjT5RpNUXE5JjcQ1bd7qRWoECY9LPXyTr4MGtqzg=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bb:fa:f2:16:f7:df:b2:9e:8f:98:b5:69:86:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=9bfaf8d8ef3a1807b8db1cc9589dbb408d475632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1a:a5:ab:9f:83:fc:00:ad:3a:cb:eb:05:60:
43:3e:a3:08:78:30:c3:24:ff:a9:70:30:03:35:64:
92:79:23:77:48:a3:c5:86:89:51:35:c3:0a:1d:99:
8e:9b:e7:15:5a:2d:1d:43:38:ac:af:3d:d2:ef:c0:
9a:07:80:a9:40:9a:20:06:0d:ca:e1:f2:62:fd:66:
05:c0:98:ad:48:57:d1:f1:34:9e:9e:3d:c4:f1:1c:
21:64:dd:24:ad:22:12:ea:ef:f5:23:c2:7c:1f:2e:
cf:eb:f1:46:e0:64:eb:fa:75:a8:e7:6b:a9:ed:2b:
27:54:10:ee:db:be:18:9c:a4:76:0d:bb:c7:1c:1b:
33:54:b4:2b:45:bf:72:1e:a1:c2:3d:86:0b:9d:04:
60:d3:4c:e2:16:3e:27:b2:d7:a5:da:6c:d2:8b:77:
e4:c8:25:66:27:b8:52:49:12:dc:11:2a:24:ba:00:
d4:ba:19:b5:55:9a:cf:25:24:28:bd:26:91:de:cc:
c2:f8:9d:22:8d:15:bb:a8:4d:db:9d:2d:ed:0c:46:
89:f2:e5:a1:3c:69:88:9f:69:d7:db:36:ff:1e:b5:
0e:f4:8b:c3:00:b1:a7:9f:fa:51:0e:50:5f:51:7f:
fc:0f:89:04:55:b8:02:cc:8c:51:7d:3c:55:ea:2e:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:F8:D8:EF:3A:18:07:B8:DB:1C:C9:58:9D:BB:40:8D:47:56:32
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d4:1a:09:b5:2c:72:0d:db:b4:b1:a4:4d:e1:a2:23:9e:85:
11:52:ef:0f:df:2f:37:9d:2c:7e:84:00:63:78:a2:3b:64:4b:
91:a2:28:c3:6b:bc:18:d9:10:c1:58:22:f9:98:8d:93:94:6b:
33:d7:e8:da:ee:08:ea:1f:ce:36:16:4e:bb:f3:10:86:3b:a2:
6f:34:f7:33:57:e7:2a:a2:4a:4e:f5:28:07:2b:ed:d5:b7:db:
d2:5b:54:6a:a9:c5:e1:36:a9:6b:b4:02:63:66:4d:92:0d:1d:
b1:8c:26:ef:16:41:1a:78:ac:f1:03:4f:f2:e1:2e:a5:5c:ca:
64:08:15:36:cd:05:e8:7c:c9:de:6a:c3:23:e8:6a:a2:d5:55:
24:94:e0:6f:6d:d8:aa:8e:ce:f6:88:4d:c9:eb:2f:85:7e:22:
a1:cf:9a:12:d8:1f:8a:a0:94:cd:6a:3f:24:88:ac:96:a2:22:
b8:8f:bf:42:0a:ef:82:1b:cd:21:4e:9c:e8:38:af:cc:24:2b:
a0:ef:2d:37:dc:d2:97:6c:b7:12:45:c8:69:81:9a:43:d2:c7:
61:32:b2:c4:82:5f:c5:d3:c3:83:e3:9d:4e:38:ad:af:61:f7:
6a:31:04:d8:57:85:88:47:21:a3:92:b8:c8:6d:fd:4d:f8:41:
28:4e:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:33 2025 by rpki-client