Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: GIqBfYvk3HT6JwdBgl/781ZiOVpZyChn470LVrPHov4=
Subject key identifier: AF:F9:38:F0:0C:A6:7F:7F:D9:95:06:1B:85:D7:6C:C7:79:02:5A:F1
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 0197C6144D8BA4E8E7243BED47A610C68CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 13:01:48 +0000
Manifest this update: Tue 01 Jul 2025 13:01:48 +0000
Manifest next update: Wed 02 Jul 2025 13:01:48 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: /G6qxUEVsLdcdFkS2XrxK6qCvAXn1EcGMBvjjxV2PXs=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:4d:8b:a4:e8:e7:24:3b:ed:47:a6:10:c6:8c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Jul 1 13:01:48 2025 GMT
Not After : Jul 2 13:01:48 2025 GMT
Subject: CN=aff938f00ca67f7fd995061b85d76cc779025af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:37:da:3c:91:b2:8f:fe:8f:ae:3d:51:07:
32:3d:e6:dd:9a:1c:fd:c0:be:fd:9b:76:fe:bb:29:
1d:b9:b1:8b:82:f9:ce:18:25:be:ac:b1:4f:83:d8:
2c:2c:e7:30:4e:eb:fa:df:c2:b9:63:c7:13:1e:b5:
ca:0d:2d:19:19:cb:a4:0a:82:c2:72:6d:0a:05:b7:
de:15:20:ee:16:cd:bc:cd:2b:ca:9c:55:72:97:46:
61:f7:15:15:93:6c:38:81:46:82:d1:26:14:b5:0f:
ef:d0:0f:f6:ed:fb:46:92:38:5d:6b:63:d3:e5:7a:
fc:41:33:ad:61:6c:ba:64:32:19:1f:23:88:ef:5c:
e6:72:87:c2:46:53:7f:06:2a:3e:d5:ea:50:08:cb:
b2:35:e3:2a:94:50:50:4e:52:f3:dd:4d:e1:1e:af:
b8:e1:e2:08:96:d4:8c:9e:14:f1:d5:2c:40:87:6b:
b4:81:7a:33:21:c0:0f:42:08:e7:0d:d4:7d:c5:12:
87:45:85:61:bf:1d:b7:a2:d6:41:20:2d:59:77:44:
24:f7:da:2b:31:d5:8b:80:7b:aa:93:92:76:1f:29:
b9:1e:d9:60:a4:bd:e6:e8:03:a8:09:af:40:27:15:
5c:4e:db:e8:6b:95:76:d2:ba:f8:3b:33:cf:7e:d5:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:38:F0:0C:A6:7F:7F:D9:95:06:1B:85:D7:6C:C7:79:02:5A:F1
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:9c:68:0d:78:86:36:d3:d6:75:ad:05:e1:07:28:d6:73:
c2:ca:fc:f7:e4:54:c6:f1:8e:ae:0d:06:12:32:1e:a5:9e:90:
2a:e7:b5:e1:49:0d:fd:a6:f6:d4:d4:b2:53:a9:76:fd:82:24:
76:4f:db:d8:f8:4a:c9:f5:b7:a9:b0:99:8c:94:2c:87:3e:ac:
5f:9e:b9:f4:8a:1e:9d:a5:74:71:16:3a:2c:dc:97:43:2e:71:
4e:27:07:6f:96:7a:15:1e:ec:8a:d3:de:e9:82:c9:0c:23:9b:
39:9f:f6:2b:95:9b:1b:ca:80:2b:77:6c:0a:3c:1b:01:69:a5:
d7:d2:ff:8c:72:71:c3:d4:1a:70:2d:05:a4:d5:ff:43:dc:f2:
1d:a9:b7:16:b5:5f:1a:19:56:fa:2d:46:c0:9f:a5:be:99:63:
7c:a6:65:f4:2b:ce:9f:0a:19:d5:7c:d5:44:25:9f:22:16:ab:
e4:43:d4:1e:0b:f5:60:d4:a7:87:7d:e7:3a:b7:e7:b5:d0:65:
f9:14:ed:78:43:59:6c:f5:e9:b0:76:09:47:95:eb:82:e5:b4:
16:6d:cd:03:d6:49:c8:98:19:c6:49:00:6c:12:d9:07:43:26:
f3:81:d0:ba:69:83:a9:0a:57:5e:16:7f:60:f7:94:d7:06:89:
27:ca:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:33:52 2025 by rpki-client