Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: Azgl5qB5sDDuHgeKJdEFBjinpYbs+oBOsXhGiKvUufk=
Subject key identifier: BD:BD:87:09:DD:4D:4C:A2:09:9F:D5:67:CB:9F:B3:62:03:27:04:BB
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 0197B70EF994619182D828AB0B96C49AA6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: ZWX+oyCP6QmRr8a9Z0i9g3i/pJGL2ytAATzK8lAPrms=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f9:94:61:91:82:d8:28:ab:0b:96:c4:9a:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=bdbd8709dd4d4ca2099fd567cb9fb362032704bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:b8:8f:87:55:2f:3c:11:f9:3c:b3:33:36:
c3:ed:e4:bf:32:1d:46:13:63:a0:7f:b8:43:cc:d0:
8c:18:08:2a:ff:54:79:5e:d2:74:1e:bd:09:b1:51:
6d:56:a5:b3:40:07:3f:a7:48:de:a1:b1:d5:98:d0:
87:2e:fc:ed:67:e8:da:21:1d:7c:53:15:a7:71:88:
c7:c9:fb:2a:e0:07:74:2a:eb:25:c5:a4:fa:2e:c6:
22:54:3f:a6:fb:58:1d:cd:1d:0a:be:1f:f8:06:5f:
f3:6b:f0:c6:cf:e3:2e:c5:50:ce:2d:fa:52:16:d7:
36:03:08:8a:b6:1e:48:01:1b:aa:c7:f8:a0:2b:27:
00:9a:9b:e3:e1:68:e5:03:e5:62:6a:9a:d3:a1:2b:
98:07:f0:20:dd:53:f1:73:e0:c6:2f:9c:f1:81:99:
b6:8d:82:93:10:eb:95:ac:c0:e1:95:6b:58:5e:3f:
58:60:36:c4:70:a2:4a:38:85:db:43:ae:e6:6e:fc:
82:a9:43:31:8b:4b:ef:f7:14:1e:50:a8:7e:d7:ac:
4a:33:da:15:79:09:51:cd:8a:33:de:39:39:56:3d:
5d:0a:1b:0a:9f:df:8e:33:32:c4:90:17:94:67:a5:
c7:dd:fd:9c:6d:65:e2:31:d3:49:eb:ba:49:6f:27:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:87:09:DD:4D:4C:A2:09:9F:D5:67:CB:9F:B3:62:03:27:04:BB
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c4:db:44:9c:d3:d7:9d:b7:02:66:44:24:58:12:c2:ab:46:
ef:67:01:78:5d:3b:31:fb:14:c1:8b:5e:ed:af:4e:27:9a:9a:
6a:03:22:e7:e2:33:85:dc:9d:2c:41:99:13:e2:d8:40:e9:56:
70:d3:af:bf:64:1f:64:3c:b1:1f:7e:1e:fc:65:6d:cf:1b:a6:
4d:b3:c5:c2:06:a6:84:a4:0c:01:4d:0c:5e:20:c7:96:72:f6:
57:22:3d:3d:15:e9:a3:f3:43:a5:db:4b:d8:88:96:25:4e:b8:
56:59:7d:77:c9:53:09:8f:97:ef:99:1d:b5:87:e7:e8:4f:9a:
fd:30:27:7b:1d:45:11:86:ae:73:ab:3a:a0:ac:0e:c3:b9:00:
10:8a:97:82:ed:d5:26:f8:17:11:59:87:70:30:a6:5b:36:9a:
ad:56:4e:3b:39:d2:90:bc:d4:c7:3b:b0:9d:7a:90:a9:5b:6f:
37:e1:8c:06:94:57:44:9a:8b:60:9b:76:6e:06:ba:13:76:f8:
06:35:0e:11:96:bd:d3:01:22:96:ed:7f:aa:69:5c:b5:c4:ff:
4a:34:ac:a5:da:55:7d:cf:75:22:13:32:13:da:17:7c:da:81:
9d:1d:f8:62:66:84:89:6a:5f:2c:b7:8c:df:eb:2a:bc:90:f7:
29:3e:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:15 2025 by rpki-client