Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: OivHfoU9L7ef7KRr+OUu1g3QWS7ofSSFvHhCScOmueA=
Subject key identifier: BC:73:53:D0:93:0C:F6:FA:59:B3:59:46:B6:F8:E0:7F:10:99:B5:52
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 0197B5FBC62E0031A5BE2E4973857AF209D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:05 +0000
Manifest this update: Sat 28 Jun 2025 10:01:05 +0000
Manifest next update: Sun 29 Jun 2025 10:01:05 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: SSFITZIF9GBIG8K4+irOah1YNNhNLLzNEi8NOG2t3Ms=)
2: MAicR0R3ncVMTkKV0oZy3oBwEck.roa (hash: WaK4eGmwJjqB7bEEMx1lPorCW+4yf4wVwlYB8uvjgfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:c6:2e:00:31:a5:be:2e:49:73:85:7a:f2:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Jun 28 10:01:05 2025 GMT
Not After : Jun 29 10:01:05 2025 GMT
Subject: CN=bc7353d0930cf6fa59b35946b6f8e07f1099b552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:1c:5a:51:0b:a9:8b:e1:ea:b5:f7:17:37:
14:36:6a:8d:e1:43:10:4d:eb:9e:59:a4:dc:c7:2b:
79:b2:28:91:7c:5a:d8:28:8e:be:c3:e9:9f:d4:cf:
37:b4:20:a8:d8:b6:09:38:88:02:f3:25:cd:d1:02:
4c:3f:55:9d:45:6e:96:30:77:e6:76:c8:b5:d5:d1:
06:be:b0:60:71:14:87:65:d5:7f:f4:b2:86:28:bb:
ae:b3:1d:69:e8:3a:3a:de:82:0c:99:02:23:e5:9c:
c2:b0:3e:13:7f:65:52:eb:35:36:5e:d4:a0:9e:1b:
1d:58:e6:c0:01:de:22:31:8f:66:f1:eb:5e:1f:b6:
88:ca:ec:75:47:12:15:a3:71:b3:77:f8:f9:9d:c1:
71:5e:4f:0e:e1:9e:e1:74:21:bf:bc:fa:ed:84:16:
0a:a1:e9:86:ba:29:14:75:7e:f1:65:37:97:c9:5b:
c5:52:36:6e:2d:83:aa:97:16:e2:f2:88:fa:1c:87:
f3:67:36:88:a7:63:ce:d7:52:cd:26:8f:ad:cc:65:
65:af:48:ad:42:8f:2a:0b:66:f9:f9:86:23:da:fe:
9f:f0:08:7b:9c:33:33:8e:a1:3b:de:fa:41:20:67:
53:70:c7:95:b1:3a:9b:65:51:46:58:bb:84:8a:5e:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:53:D0:93:0C:F6:FA:59:B3:59:46:B6:F8:E0:7F:10:99:B5:52
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1d:07:be:06:c3:9a:17:2d:95:8f:81:9d:c7:a3:6d:3f:53:
48:01:d5:d6:e2:04:88:38:bf:c1:f9:b5:16:d4:50:6d:85:6a:
07:62:97:d1:21:98:c4:ae:f5:80:3e:e6:40:9b:ae:50:65:f5:
30:67:34:1b:28:a6:78:2e:92:53:8f:87:f5:bb:55:e0:1d:f2:
7a:f4:93:5f:0f:2c:4a:f6:4b:81:83:a9:16:b9:7a:ca:6d:b4:
bb:2d:69:47:6e:27:63:95:39:78:cf:c6:c9:d1:71:43:e1:a1:
7c:88:9d:e1:45:48:6e:3e:d0:b9:7c:1b:08:cd:b0:61:95:45:
c7:20:11:4a:c7:b8:b9:65:a4:fc:ef:aa:e6:21:f2:ae:43:dd:
0a:2f:78:d3:8f:8a:54:24:fd:39:61:5c:6b:f0:ad:54:1c:03:
e4:52:d2:85:9c:7a:f4:1f:a2:f3:7c:f0:7f:15:38:96:52:24:
4f:82:fd:92:78:46:ed:c2:0b:29:18:54:7e:c6:42:12:a9:ea:
d4:38:5a:35:8c:35:5b:b0:58:5d:27:3b:28:f8:5a:b4:36:61:
0f:8d:61:bd:d5:ef:57:72:90:ca:8f:ad:4b:53:5c:af:00:9a:
bd:0e:61:f1:d0:30:5d:0f:bc:e2:25:97:31:87:6d:2d:55:4b:
2d:b0:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:42 2025 by rpki-client