Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: 9AswmwiU1YmBeUmX6tYLynd4PGMDsXmeCzB7BkpLRVE=
Subject key identifier: AF:C8:5B:E3:15:B4:73:D2:F6:1A:AD:63:6B:9C:AF:C4:59:39:4B:F6
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 0197B7454F8023A11A964D38FF46A4E1CFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: y4Zi/7LFvVgm/jlBdz4L7EtFdWBBGv4q7yJ5aP0wPl8=)
2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4f:80:23:a1:1a:96:4d:38:ff:46:a4:e1:cf:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=afc85be315b473d2f61aad636b9cafc459394bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:70:47:1a:72:e6:69:f2:75:1e:3c:b0:ca:a6:
ff:74:29:72:74:70:da:15:23:8f:8b:2b:d4:f4:60:
4b:bd:25:44:bd:9a:ae:31:d5:49:59:7e:65:bf:ac:
6d:9e:5c:04:f6:71:b6:4d:12:dd:75:0e:ee:44:27:
12:01:07:a1:8f:85:1e:d6:3d:fc:35:c1:3f:76:99:
68:eb:a3:15:6e:35:03:9a:1f:be:1e:44:f9:62:7e:
04:c3:dc:c1:0f:98:41:d0:77:b7:ce:92:f1:86:c3:
ea:a6:24:e7:22:1b:f0:52:b8:53:e4:01:33:99:cc:
00:41:f0:79:25:49:6f:d3:27:2c:90:75:57:6a:ac:
6a:bf:f0:a3:93:0e:90:92:bf:1b:ee:62:af:da:c6:
8c:e7:a5:31:bb:a7:e6:f9:49:e1:79:98:96:99:59:
10:8a:7f:b9:46:50:ef:c6:05:56:1f:69:3d:d3:a3:
64:12:74:ca:36:2f:7b:1c:65:5d:01:69:d8:82:38:
d3:e4:84:34:f7:4c:7b:8a:5c:f7:ff:9b:d3:cd:e1:
c7:3f:ff:01:6b:82:43:7f:97:1d:91:b8:27:9b:a6:
1f:74:09:cd:f9:c7:73:da:93:a1:d3:84:6d:e2:64:
d6:dd:6d:31:8e:a6:a2:f7:77:8a:8b:19:3d:b6:9c:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C8:5B:E3:15:B4:73:D2:F6:1A:AD:63:6B:9C:AF:C4:59:39:4B:F6
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:5a:ad:53:53:ee:e6:50:5c:44:4c:1e:4f:99:58:60:90:
c8:a0:8d:e1:5c:df:0d:0f:10:ea:28:ed:c9:7c:73:c2:6c:66:
92:a3:16:d0:1d:19:c2:4b:b6:98:02:f6:39:1a:ba:56:10:f5:
c7:f8:86:03:1b:6f:3a:7c:f8:c3:a8:f6:61:28:5d:cb:be:49:
43:d4:6c:0e:0f:dc:b8:24:28:45:9a:c3:47:ef:d5:b8:85:e7:
d2:d0:65:88:ca:da:d6:ff:3a:c6:9d:8b:e2:0b:25:fc:7a:6d:
b4:42:3d:17:eb:2b:b0:4a:f6:54:7d:70:98:2d:18:c3:01:a3:
67:4c:5a:11:d2:02:77:c8:f9:c0:90:d7:9f:96:be:5c:5f:4c:
aa:57:cc:89:84:ad:08:ec:cd:55:f9:0a:5b:0d:b1:af:26:51:
ea:d2:52:de:f1:85:89:57:6f:c2:88:62:04:59:8e:c0:93:52:
30:eb:4f:61:04:56:44:3b:07:57:b3:59:ef:a4:dc:c5:81:e3:
a8:7b:a2:47:a7:1e:04:9a:29:46:0b:80:08:91:a6:b6:30:9d:
c1:d9:f5:86:39:af:a3:41:be:d9:4c:e4:ee:b0:71:37:43:2b:
c0:c7:55:5d:2a:2d:43:5c:4d:26:31:08:89:3b:26:23:ff:1e:
da:95:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:45 2025 by rpki-client