Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: MyGX2UGDcJEhY4P/lRofHQ2LlTE7YsxWCFuiRSE6oR4=
Subject key identifier: 3B:F4:52:2F:1A:10:E7:16:44:19:99:94:39:88:1C:6A:DE:04:A9:BD
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 0197B6D74BE33B9B188929731998466C0A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 8F
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: N39ALHZbeC8kGHv6i9OenLwLrBgmCRCpGnknD2Dg+S4=)
3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4b:e3:3b:9b:18:89:29:73:19:98:46:6c:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=3bf4522f1a10e7164419999439881c6ade04a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:4b:b5:38:42:b2:90:7f:ee:46:ca:86:1e:
35:5b:ed:c7:38:e7:32:a0:18:88:d8:c5:89:2c:cf:
b2:2c:6c:cb:39:6e:b3:c1:a6:f1:ca:18:84:e7:5a:
cb:1f:0b:ee:51:73:72:e3:57:06:04:b6:bf:46:29:
15:86:8b:8b:56:ab:bc:39:8a:b5:40:65:ce:44:7f:
d2:2e:0a:7b:41:0c:6b:0e:ae:bd:de:ea:12:f0:3d:
24:77:55:7b:6b:c3:a6:9a:6f:ad:f3:db:05:c9:0a:
3f:5c:bb:c1:0c:a0:84:1b:24:71:79:19:b4:2a:d0:
a7:bd:6b:a9:05:fc:59:57:94:6e:f6:b5:f3:6f:c9:
b1:07:21:90:04:e4:fb:b9:5a:de:6a:60:2d:c2:17:
1e:81:b4:d5:83:ef:85:aa:60:7d:60:94:53:cc:dd:
94:78:97:0d:8b:2c:fd:5a:1e:0d:f1:59:7a:75:df:
c3:05:cf:b4:4c:7a:9b:f6:e2:97:d7:d3:f2:ac:a1:
7c:b1:a8:2e:12:85:5d:29:0e:4f:10:9d:5f:0c:58:
a5:0b:91:be:4c:3a:e0:32:dd:cf:80:af:da:2b:22:
f0:04:2b:67:76:1d:d1:93:1f:85:65:e2:27:63:a6:
fd:0a:56:ac:31:4d:d4:49:81:ef:38:af:90:0d:6b:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:52:2F:1A:10:E7:16:44:19:99:94:39:88:1C:6A:DE:04:A9:BD
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:6b:8e:1d:b0:26:3c:1b:92:87:fc:64:c1:0e:d4:3f:3e:
42:54:68:3e:d5:ba:39:d1:3f:7f:89:8e:5c:09:6e:0a:23:c6:
86:02:55:c9:a5:d2:0c:50:b2:46:d2:a0:c6:de:21:47:63:2b:
58:8c:09:06:44:74:f2:24:c8:3c:d7:45:8d:27:ea:be:01:3d:
c5:18:96:51:af:57:43:d9:d5:49:3e:48:d8:80:e7:79:2d:c6:
2d:a7:fc:54:94:be:c6:ca:24:9a:38:92:ad:04:dd:7d:ef:f4:
b4:b9:b7:74:ea:05:1a:9f:4d:7c:da:b9:9d:8a:d7:97:5c:b6:
f5:62:9d:ce:a1:29:2e:8d:f1:62:fd:ae:70:6d:14:2c:9b:dd:
75:f9:f8:0f:24:98:d0:ac:fb:10:45:52:db:84:bd:95:9d:03:
d2:db:4d:91:41:ab:64:47:b7:66:55:21:ef:a8:82:df:4e:7e:
cb:29:7e:1e:16:96:fb:d4:a0:cf:ee:ab:8c:77:9f:33:c3:22:
42:24:d6:87:97:fb:df:f6:1a:09:27:69:37:c9:b3:dc:89:29:
45:30:f4:c5:ce:be:8b:52:e6:9f:bf:9e:50:94:13:62:57:d8:
3b:74:48:c9:00:1f:a2:cf:20:45:56:85:5f:fe:d0:8d:3d:59:
9e:38:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:27 2025 by rpki-client