Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: JXyDbgWzVq1ZQXlh4dlZ73Ea3JHvzs42Gj8/sOUZ0JA=
Subject key identifier: A1:22:57:7F:2D:4E:E5:6D:88:57:59:5B:A4:8C:CE:08:55:85:1A:0D
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 0197B70F02B1F4D7AB5BC7959455BFDAFCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: KJzoiEVx+5N7MuuwQlkqaYo2X4MQ8eSyCX4L87fwQbs=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:02:b1:f4:d7:ab:5b:c7:95:94:55:bf:da:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=a122577f2d4ee56d8857595ba48cce0855851a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:df:74:88:73:04:80:ef:f3:c0:cc:5e:3d:
5d:ad:aa:2f:4f:3c:89:0c:fa:47:a4:bb:50:30:7f:
7c:f8:25:4d:d9:55:95:6a:26:e4:34:1a:0d:d7:88:
34:65:2a:c6:de:87:01:3d:39:5b:5a:64:e5:83:f1:
e8:59:ab:89:ba:46:5d:11:0b:17:da:7c:b6:7e:1f:
ae:62:d6:47:73:7f:56:a0:34:f0:e3:b0:94:06:0b:
da:c2:c8:d5:40:4a:dd:5b:bf:57:6d:67:66:ea:44:
f4:98:ba:84:22:79:4b:e7:30:38:d8:e7:b8:93:17:
a3:89:07:c8:06:86:fa:bd:e3:0b:31:a8:e8:b1:c7:
15:b4:18:4d:0b:0b:33:07:f5:58:98:36:f5:91:59:
aa:68:0f:98:f1:dd:dc:2d:65:3d:4c:6b:3d:69:52:
67:f5:db:89:b9:82:d4:e5:60:8c:bd:35:80:04:d7:
50:30:6e:db:69:cd:b2:9b:49:75:2e:cc:d2:fd:3e:
b4:b3:44:fd:1a:a9:69:d9:fb:64:1d:f6:ee:57:26:
a2:ea:38:48:94:98:a5:d7:01:9a:ed:4f:f3:8d:e3:
1a:7e:69:17:60:60:5e:af:cb:0d:8e:2b:db:a2:1e:
41:14:fd:09:43:81:21:d5:9f:ea:c4:57:96:70:43:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:57:7F:2D:4E:E5:6D:88:57:59:5B:A4:8C:CE:08:55:85:1A:0D
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6b:5c:a7:21:d2:6c:08:69:6d:bf:59:06:f9:ae:d5:33:13:
d3:64:a9:b4:c5:f3:af:e0:3c:ce:8e:13:f5:63:0d:91:88:3e:
04:44:20:91:54:4d:3d:b8:58:1f:fc:20:47:43:bf:80:e8:ce:
1f:6a:de:ae:c2:d2:b1:88:fd:ea:0c:a7:7b:1a:51:43:d6:64:
f0:3b:07:cf:18:5a:de:99:34:9f:27:0f:8d:f4:82:c3:23:b0:
7f:d2:94:10:66:17:7f:3a:d3:77:52:ed:01:43:91:41:ca:73:
f1:da:c6:64:ff:41:15:8b:3c:fd:08:e0:b2:99:ff:67:e1:fc:
bb:e8:6f:0f:e8:3e:4f:be:40:8d:01:4f:cd:35:10:52:9b:e9:
2d:1f:a5:0b:c3:be:85:f1:91:eb:42:d8:d5:3f:9c:6c:65:18:
e0:80:ee:af:21:f1:f6:c2:e8:3a:91:b5:dd:8b:6d:90:92:5c:
54:94:01:93:f1:70:aa:fd:fb:05:52:27:c5:bb:8b:ff:52:5f:
79:8e:44:33:e8:98:f1:78:06:d2:2d:be:6e:2c:c3:1f:e2:50:
07:d9:3e:e6:d4:73:16:8b:e7:67:a5:38:8b:63:46:4b:fd:ac:
c1:6f:26:c6:26:36:7f:58:05:de:76:c4:34:4f:63:81:ac:78:
7c:0f:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:37 2025 by rpki-client