Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier: 6Fi+BrYuBAcC2hLdCX5Nlj9xVq6Gd5WoUYr2pW8GWMc=
Subject key identifier: F0:84:F0:57:1A:29:B2:BA:FD:7A:D6:7E:88:4B:85:F0:6F:D7:67:06
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0197B77C7F0A3F65EF1D0ABF4F56790FF369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number: 0D1B
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=)
2: MxnFRwJmFw3H9pKkZeWdK5EluaA.roa (hash: /4BdfcwDrvCIqi4T11GSU+QWVrhInkiIc6kfChEW8jY=)
3: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=)
4: S1RIB9s1tG-hm5z5-rZePJ-MweU.roa (hash: FmWX2DduKBzq/vRo5ziklwxZPbeNxAbr96ijiwn0mxI=)
5: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=)
6: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: pRMMTVp1DQ585zyZe2uq125rWj7F1i++2mwsoo/I72M=)
7: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=)
8: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=)
9: rQW2dw98Fh-iwHUnu837pVRjuWc.roa (hash: Pa1aj93uAUOOLzOu+jsDUQFa2MsGoVi8bIM+YOqFcyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7f:0a:3f:65:ef:1d:0a:bf:4f:56:79:0f:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=f084f0571a29b2bafd7ad67e884b85f06fd76706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:a0:9d:66:4e:45:0b:71:ac:ce:c3:87:00:
28:bc:79:5a:a1:9d:a2:7d:c7:88:73:12:9e:25:f4:
2b:a9:f9:6a:7c:43:94:5e:a6:30:17:5c:7d:1c:91:
fb:2e:97:90:15:68:84:46:94:9c:1d:93:2b:82:8a:
f9:91:75:60:55:1d:d2:9c:44:3e:bc:ec:58:ed:a9:
99:18:b8:c2:16:13:b3:51:08:5c:1d:ba:29:4d:68:
8f:67:e2:0a:54:49:a3:64:33:ce:13:c1:fb:cc:08:
b5:b6:5b:2e:37:6f:60:3e:be:8f:4b:0e:96:f6:41:
90:f6:94:08:23:87:bc:58:d6:79:d3:14:66:7d:55:
34:e8:7b:88:0e:8f:cb:11:37:b3:4c:37:df:e8:c7:
9a:94:5e:47:24:3b:8c:2c:19:15:93:be:24:94:10:
1e:5d:79:26:7f:71:0d:78:c5:55:21:8b:95:e0:61:
23:85:54:f2:c8:7e:97:0e:6a:54:d1:27:7e:e3:9c:
57:86:22:eb:51:6f:d1:4f:1e:4d:5f:a3:59:38:75:
8f:09:f8:46:3c:8f:37:ed:39:c3:1c:8e:d0:40:06:
28:e3:20:94:d7:b0:e7:7b:5f:27:53:76:65:99:db:
8a:95:63:33:83:31:64:83:8b:95:e8:49:df:89:ca:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:84:F0:57:1A:29:B2:BA:FD:7A:D6:7E:88:4B:85:F0:6F:D7:67:06
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:3d:56:b3:46:76:18:66:0d:d5:b1:15:7e:01:89:b8:90:
f4:3f:19:93:f0:27:55:f8:91:20:07:37:32:d1:0c:de:c0:ab:
6c:84:fb:0a:f9:c4:62:bf:9d:8f:9f:e9:08:80:44:a6:73:5a:
bc:34:8a:d5:0a:ef:94:eb:15:d6:93:5a:8e:35:f5:c1:fa:28:
ef:b4:97:85:8e:c2:6b:ed:d9:53:40:50:bf:cc:74:f1:4b:9f:
25:d9:38:03:cf:5c:a3:0c:53:ff:15:8b:20:df:d1:43:00:40:
37:59:08:f2:a6:23:42:90:cc:0d:83:dc:41:fe:b2:e9:23:f1:
72:ec:2b:ac:ae:98:10:dc:96:8e:f9:ee:35:ae:d2:76:a9:53:
65:a0:29:72:7b:d9:1d:5b:87:a5:63:98:d4:1a:7f:38:79:2d:
24:af:9a:0a:02:c9:d7:f7:c5:26:d2:1c:b0:b9:2b:e5:82:cc:
c1:3d:66:2b:dd:7b:44:10:aa:09:5f:91:be:0b:d3:be:34:80:
2b:bc:a2:03:9e:87:96:7a:9d:b3:52:ab:47:a7:ad:c9:86:c3:
e4:9b:d5:cf:0f:1a:c8:17:93:16:f5:09:84:1a:89:d5:9a:fd:
5f:45:fd:a3:81:ec:ab:62:1b:2c:6e:05:16:a4:40:c6:40:cd:
d0:2a:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:18 2025 by rpki-client