Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: Mm/0sc2kuC0/7TeNY34ftwF1qhc8OUS4jx9d+ecHeAk=
Subject key identifier: 12:B6:DF:41:3C:F4:6C:E1:C2:8E:13:A9:DD:14:4B:96:5D:D9:C4:F3
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 0197B5FC72BCC9196DC21108D217354701F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:01:49 +0000
Manifest this update: Sat 28 Jun 2025 10:01:49 +0000
Manifest next update: Sun 29 Jun 2025 10:01:49 +0000
Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: GvvgnyyfWDRkGBjOXnuFAuZc0PnfhAbFADIknluI1Bo=)
2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:72:bc:c9:19:6d:c2:11:08:d2:17:35:47:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jun 28 10:01:49 2025 GMT
Not After : Jun 29 10:01:49 2025 GMT
Subject: CN=12b6df413cf46ce1c28e13a9dd144b965dd9c4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:45:5b:b7:48:02:9a:d5:3b:2e:cb:01:a9:
91:33:77:20:0e:55:13:cc:44:8a:74:49:00:e1:b9:
67:f4:31:f8:56:67:d9:be:14:ce:62:d4:d6:db:bc:
34:40:34:92:8e:c0:f8:3d:6d:33:01:a8:98:59:29:
c2:57:e6:4b:9b:15:dc:61:84:5b:dd:fb:b3:5d:0e:
8b:6d:bd:2d:b6:59:a5:fb:8b:70:06:cc:66:ee:62:
b1:4b:6f:53:41:95:84:93:66:7b:1f:f1:77:6e:1c:
fe:32:2e:6e:61:46:18:a3:3e:4a:ab:70:7a:3e:cb:
4d:8f:c0:c7:0a:5a:ab:b3:7f:39:88:b9:be:1a:20:
81:c3:5d:d5:28:30:22:95:89:42:84:19:ea:20:a2:
68:70:7f:68:2d:b8:8b:38:58:0f:42:76:be:f2:40:
e2:26:86:05:09:87:1b:22:29:25:3f:08:fd:2d:0a:
9e:bf:9e:19:ee:5a:39:97:18:6c:c9:65:f6:b2:16:
67:a7:36:fc:f8:fc:5c:43:79:c2:b2:e7:55:61:80:
19:93:0f:77:c2:8f:a8:67:54:78:cc:a0:99:58:c6:
e4:b3:21:5e:e5:7b:30:4d:64:14:9e:65:8b:65:6a:
80:16:3b:09:ad:e2:6a:f5:44:53:e0:41:e7:91:f2:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:DF:41:3C:F4:6C:E1:C2:8E:13:A9:DD:14:4B:96:5D:D9:C4:F3
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9d:c2:6c:0b:e9:0a:e6:b3:65:6b:ae:45:c8:30:f1:52:a9:
d8:ea:f9:57:c7:46:80:51:60:fd:d7:b6:94:13:80:82:dc:2f:
18:9d:70:96:e7:c3:01:19:29:86:c6:f1:70:5d:05:45:a0:a6:
0c:9d:38:f3:38:a7:a8:a6:aa:ba:34:aa:35:86:ed:24:a8:78:
38:e6:23:32:39:ca:17:55:b7:06:9d:41:4e:35:ca:39:d8:c0:
5d:c5:61:ad:33:44:77:6b:02:1d:36:f5:34:4a:22:e6:d7:e7:
ee:8f:2f:52:59:a6:0e:bb:65:b0:b4:3a:f4:ee:97:6a:01:5e:
e3:5c:79:ef:a2:ac:d8:98:22:9d:f4:e1:b1:98:ca:91:6d:a2:
c2:7a:50:72:e7:46:91:1f:1c:d5:34:a7:3f:c6:37:68:4d:98:
84:bd:4e:36:a3:82:53:ee:19:a7:03:d4:7b:3a:91:00:90:0a:
28:74:4f:3b:f6:91:e7:d5:66:53:34:f0:3a:79:3c:fe:6b:d5:
1b:15:61:4f:b3:ad:9f:b1:36:2e:af:2a:95:2e:d8:a7:71:16:
ea:d6:6f:fb:07:ab:b2:d5:35:dd:6c:c6:dc:b8:dd:db:24:03:
c1:7d:b2:54:59:dc:bd:6c:33:97:10:39:a3:36:23:a4:50:8e:
54:a6:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:50 2025 by rpki-client