Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: J7XUiJmVCH47L6yZLOHTs8JCRyKqfKtznaBw4DbC2f0=
Subject key identifier: BC:33:E0:E0:56:EB:6E:49:37:6C:48:B8:BF:36:9C:00:D7:00:5D:57
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0197B70E5D4FCAE28E05575EF7708769F190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: fHstWwKNE/URHVX6YQ4OxKrJsyEM1yMMPPlONeIyOv0=)
2: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
3: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5d:4f:ca:e2:8e:05:57:5e:f7:70:87:69:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=bc33e0e056eb6e49376c48b8bf369c00d7005d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:82:bd:84:b3:fc:5a:be:4c:22:62:71:93:
11:1c:96:cf:a7:cb:ea:d0:df:8e:85:81:96:38:16:
89:f6:b0:7a:78:48:ca:e4:5c:e8:05:8a:40:2f:e4:
df:0a:9f:8f:de:46:83:a7:4e:fe:66:f8:06:51:62:
c3:d6:77:a1:65:38:74:f0:68:35:3b:76:4c:48:d8:
71:76:e7:30:f4:19:76:ba:92:cf:bc:92:38:59:63:
9f:ac:1a:83:6e:a4:bb:1e:9b:2a:1a:3a:41:75:60:
c8:08:02:27:f1:1d:fd:9b:81:3f:c9:9b:7c:79:56:
27:6a:6e:00:b9:bf:b5:0a:03:0f:9d:82:04:34:b0:
8b:b5:cf:6d:8b:57:c1:ea:dc:d3:b9:74:8f:3d:b0:
1d:f4:f6:2e:1e:39:a3:e3:52:57:69:ab:8b:6f:4f:
84:32:46:9e:b4:bc:8c:12:89:8f:27:69:c8:46:1d:
7b:e7:ce:0e:1d:bd:e2:5b:39:65:69:f0:ee:dd:e4:
ba:66:73:74:64:bf:34:03:e6:a6:d4:71:52:ea:25:
3e:3a:0a:01:57:72:87:08:da:eb:c9:7a:e1:c1:1a:
dd:94:8a:32:75:49:6f:6d:89:e0:ee:03:78:1a:23:
f8:e5:60:7f:df:8a:ea:6b:ae:cc:7f:a4:b5:d1:fb:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:E0:E0:56:EB:6E:49:37:6C:48:B8:BF:36:9C:00:D7:00:5D:57
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4c:a1:27:80:bc:71:69:8f:ba:94:8a:31:a1:b4:44:7a:0a:
9e:c1:99:d8:89:a5:e1:0f:28:de:84:9e:f7:99:d0:ad:5b:51:
e3:f4:62:f1:20:0d:16:d6:f3:41:73:46:bc:a2:2d:12:61:53:
2c:41:74:cc:b6:4c:52:48:ad:da:56:c7:84:5a:ee:93:64:07:
9f:33:89:a2:96:4c:14:d6:f6:81:53:9a:47:95:8b:50:2c:57:
40:ad:41:b7:95:68:59:d5:01:53:c6:75:7c:27:6d:8e:54:e0:
0a:a2:5c:bb:00:5f:5c:fa:b3:3b:1f:f4:58:bd:0e:5d:b6:ea:
34:0e:0d:4f:6d:a7:ce:30:75:a4:6e:7b:01:d9:45:c0:93:85:
dc:dc:ec:b2:e9:99:c4:65:3c:59:94:6e:56:53:6d:f8:9a:94:
c1:ec:61:6e:df:47:52:ac:2b:94:ee:e2:39:96:0b:9b:68:7c:
f3:61:67:07:df:65:15:6a:01:64:c7:8b:90:ab:ad:14:3e:d3:
0a:53:96:58:3f:07:85:40:fd:e0:3a:d1:e0:29:f8:73:69:50:
25:4b:cd:06:c0:81:c0:c2:9e:c5:22:d7:d4:a2:80:16:ae:f9:
46:40:ab:39:ab:74:38:b6:61:3f:0a:e7:8c:fe:ae:24:ce:7c:
b5:8e:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:52 2025 by rpki-client