Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: GyEcEXe1/0/g6ue0QFnf25UhHbm4T/U/06J9Bagbje4=
Subject key identifier: B0:35:57:B5:D2:8A:1E:9F:83:A5:D9:88:F5:A8:D6:08:B7:CC:94:65
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 0197B7B3559CC88F271B2560EE2407A80CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 112C
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: QYiIeBw1SNQp1Tir6egfvjjeySo1Y4KLlmYaqouTLOo=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:55:9c:c8:8f:27:1b:25:60:ee:24:07:a8:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=b03557b5d28a1e9f83a5d988f5a8d608b7cc9465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:fd:3b:77:9b:f3:a6:15:da:fc:a7:07:53:
1b:da:e8:60:9b:73:14:ff:f9:1e:17:53:c2:5a:c0:
00:9c:f6:1f:16:da:96:99:c4:4f:1d:db:ab:1e:2d:
a3:91:20:a8:a7:dc:71:0d:cc:cb:48:e1:5c:73:2c:
ea:6e:9f:c0:62:78:58:2b:c2:4b:a7:6a:6a:f5:0a:
1d:ee:0b:ae:75:9e:e8:9d:f6:94:79:5a:df:cc:17:
04:5d:e0:36:37:e8:61:e1:af:a0:3c:4c:10:5e:86:
e2:00:be:8e:ea:10:7e:93:ed:fe:26:3d:22:47:52:
c9:d4:85:a3:ee:63:b1:b9:81:cc:1b:a8:e9:08:91:
7e:12:d0:97:c4:ac:e8:7c:ac:5f:eb:57:93:de:96:
db:8f:1e:0e:71:57:a5:69:5d:29:ac:b5:8f:8a:c7:
cd:9e:17:c0:ee:fd:73:9c:a9:da:48:f5:ca:bb:de:
31:ae:45:98:62:67:72:f0:99:3c:5e:8f:ac:f9:ce:
c4:45:07:78:72:0a:1a:2d:3a:91:d3:00:cc:76:ed:
cc:b7:fe:d7:25:f1:30:6d:95:42:7d:a8:e5:ea:96:
01:7a:e7:67:ec:5b:75:d3:68:15:75:8e:e9:14:b4:
b7:32:99:ad:54:aa:65:14:89:83:4b:bd:a9:b9:87:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:57:B5:D2:8A:1E:9F:83:A5:D9:88:F5:A8:D6:08:B7:CC:94:65
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:1c:f8:64:d8:67:c9:90:7f:b2:dc:35:f9:3d:dd:4b:85:
0f:d9:95:e1:17:7f:d9:19:76:eb:e7:51:55:25:82:2a:62:0c:
4e:b1:f5:dd:b6:c6:16:75:ef:32:10:e3:43:97:28:df:cf:6b:
48:31:89:f7:6e:07:c3:88:69:99:74:a4:b2:b2:e3:eb:25:84:
ec:65:82:18:a5:35:c1:30:da:2e:82:8b:89:61:f7:b1:83:9b:
be:40:cc:0b:85:92:a6:b6:b4:21:f6:0d:1c:ff:82:39:df:23:
6e:20:5c:8f:46:22:b0:3f:68:35:33:80:63:f3:75:f5:64:2f:
c5:5a:fd:22:f0:51:22:7a:38:84:b8:8e:9b:7d:e5:a9:94:32:
84:5e:20:a2:5f:ba:27:12:42:b6:29:f4:26:89:18:2a:7c:2c:
bc:0c:39:a8:24:ce:73:7d:fc:4c:7c:cd:bb:48:8b:8c:e8:9d:
40:53:27:8a:f8:85:94:80:95:26:58:0a:3b:3b:ec:05:46:23:
5b:5a:b9:72:75:45:a4:d7:04:50:c6:1b:70:b1:95:f5:4b:1f:
ea:a6:88:d9:3e:81:7e:03:d1:0a:6d:56:39:6c:1e:fe:4b:bc:
87:74:ea:c5:06:ef:36:b3:c7:b8:b9:f9:b9:0d:82:6e:54:4b:
00:89:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:55 2025 by rpki-client