Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: +NjQZTF35tJrgj3pjeYI9u7N2/M89l38aDdrkMlDogI=
Subject key identifier: 7E:B6:C4:37:D2:61:A3:BE:2E:DD:F9:F3:DD:48:F6:E2:CC:52:AF:95
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 0197B70E99EE2C0D2DFAC237E90F80F8F10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 12F2
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: i0Zy4fnAaLknU6Crc3DrjHKCDrk/VzVSMsdrlRCszOI=)
3: GBhjKbS-fcKacs4QagSv_dPJry4.roa (hash: z+hDh/AwHXwEXvEpHMWmz7Nj3R8e4I8tmHqYFBmRwRQ=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
7: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:99:ee:2c:0d:2d:fa:c2:37:e9:0f:80:f8:f1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=7eb6c437d261a3be2eddf9f3dd48f6e2cc52af95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:b6:cd:99:d8:5d:a5:cb:97:f7:1a:c5:6f:
04:f3:3a:b6:71:95:24:dd:97:8f:ce:d9:71:3c:55:
5d:32:d3:b6:fe:59:ab:a2:74:6d:e6:18:b9:ba:4a:
2a:c7:4b:6a:49:3f:c8:3c:3d:2e:b2:2d:12:fb:e6:
31:c9:5a:10:ed:89:74:f6:41:4b:cd:5d:f3:4a:39:
71:a0:30:e9:88:53:51:2f:86:bd:e7:0d:0b:d3:e8:
f6:bb:83:69:ce:da:fd:2f:4d:68:69:2d:a2:4c:5a:
53:f3:83:a4:ba:35:6d:ee:59:5e:fc:32:e6:67:92:
58:52:06:ff:33:ec:3e:14:e1:b1:22:2e:33:d9:f1:
60:76:27:b3:45:fc:3e:55:89:cd:b3:d8:70:80:ce:
d8:ff:b0:74:70:56:ac:a8:08:e6:89:f3:ee:29:11:
b4:59:fe:d0:4f:e5:02:77:22:c3:93:81:90:ef:9c:
d0:5b:29:0d:46:af:49:f5:5c:b4:b7:00:76:27:ff:
41:f0:6e:38:b7:b1:f8:b4:a4:45:d2:5d:b4:13:c2:
e4:66:19:78:fc:f6:84:6f:de:19:ef:7d:70:48:a4:
70:69:dc:4a:0c:a3:95:63:c0:c9:82:b5:56:47:60:
22:a1:0e:d6:ef:2d:74:0b:a0:48:cd:2e:c9:dd:6b:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:C4:37:D2:61:A3:BE:2E:DD:F9:F3:DD:48:F6:E2:CC:52:AF:95
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fb:b8:c9:e6:d4:67:b1:75:b7:09:fc:a2:ae:d1:6a:c2:a1:
c6:01:9c:39:f8:a0:4f:d4:e5:a5:c4:45:1c:71:fa:59:6e:fe:
87:99:6e:e2:d2:fe:7f:25:c1:37:89:2c:dd:38:9d:d5:05:d8:
00:5e:a8:58:89:d3:eb:3d:eb:b2:09:bf:ec:95:33:ad:00:c7:
f7:b6:f9:c7:90:f0:dc:26:50:0c:1d:7c:73:2a:0e:1f:46:57:
02:f5:f2:26:0c:50:23:d5:fb:a2:3e:50:67:9a:d1:41:da:c8:
71:80:fc:fb:54:a0:d6:f5:62:0f:c7:2f:0b:6a:23:24:33:84:
77:c9:d1:a9:17:97:47:8c:e5:b4:50:4f:ff:28:b7:8d:51:a7:
e1:16:7e:a9:e4:16:27:63:e6:b1:53:51:a4:3a:59:da:e4:3a:
2a:44:b2:a5:28:d3:54:e5:99:15:43:0f:5f:86:ce:41:2c:3c:
ba:bc:db:f4:63:ee:bf:c5:b3:05:ae:5b:9f:61:18:07:16:e7:
f8:0e:1f:8c:b6:cf:94:d5:cb:ed:b3:51:4a:54:ab:3d:1f:4a:
27:40:87:fd:0a:f5:e5:eb:d3:ff:e9:90:50:c4:a7:7d:bb:38:
1b:f0:95:1f:b7:37:fd:3c:c2:61:99:e7:04:f5:a4:e2:f0:b9:
46:a5:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:06 2025 by rpki-client