Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: 2ld64J4891vqELi1kPO0UHGVbYWPlQxhlpuRvtSjEdI=
Subject key identifier: 22:F6:68:BC:26:9B:EF:7C:7D:E3:92:9B:AD:BE:3F:52:41:CA:1B:12
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 0197B70F2C2A85919061D1148E5686A59F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 12A7
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: uln/bIoYK7glnTiYidXo9CHbirQ4hf8lm1zqN7n7jvs=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2c:2a:85:91:90:61:d1:14:8e:56:86:a5:9f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=22f668bc269bef7c7de3929badbe3f5241ca1b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:92:3d:cf:e0:27:63:51:06:15:0e:5e:a4:
7b:e4:3b:7a:1a:aa:d4:00:98:08:f1:32:82:0c:d7:
a4:36:66:5e:2f:df:a9:18:93:2d:c4:a0:c2:59:f1:
ec:fd:86:76:3a:8e:5e:23:22:a9:45:35:8a:13:8b:
fd:95:2e:3d:2d:ce:60:5d:3b:e9:b6:79:c1:37:02:
a0:8d:09:d4:44:96:68:42:4b:f3:cf:7d:8f:44:43:
71:46:e3:a4:16:6f:b3:10:c9:e9:2d:cc:dd:b3:d9:
2b:a4:90:06:c0:64:f5:f6:a2:1d:38:69:b2:bd:80:
6d:3f:86:ba:33:86:8d:ed:58:09:29:c8:45:7c:14:
32:3e:92:6e:70:d8:bf:f3:f4:bf:31:9d:f2:b8:97:
80:41:71:48:1d:c1:f1:66:ad:2f:22:6e:77:09:99:
86:9d:e8:63:ca:42:62:a5:6f:ae:2a:d8:dd:20:16:
cb:df:fc:ef:75:eb:90:14:0f:16:8c:c1:0f:fc:91:
32:2b:3a:4e:0e:50:7a:d2:90:25:5c:bc:20:d7:04:
07:48:f7:0c:40:de:ab:13:2b:5b:8c:e4:94:ae:66:
91:e3:59:a8:4e:46:c0:61:e9:4e:ce:2b:3a:f6:51:
5c:66:74:42:82:ae:80:03:45:bc:81:bf:4b:85:f4:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F6:68:BC:26:9B:EF:7C:7D:E3:92:9B:AD:BE:3F:52:41:CA:1B:12
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:02:9b:38:7f:3b:7f:a0:7d:bf:d0:a4:b3:49:c0:fd:b3:
6e:de:f0:19:86:8b:69:0f:c6:d9:12:cc:9d:ac:f3:8f:23:da:
7c:34:0d:38:78:7c:bd:30:22:44:c9:12:1a:8a:5c:b4:67:ff:
57:0d:c6:57:c5:bd:e3:b4:51:7d:a4:c5:57:8f:13:31:eb:bf:
6e:f4:18:8f:35:6a:c7:a8:e3:c3:94:0e:99:09:b2:9c:cd:e8:
5d:ce:1d:43:d2:04:64:39:f4:3c:f8:48:dc:bf:e7:76:93:ed:
af:10:a3:0e:ba:8d:04:4b:b9:f9:36:b4:6f:e5:fa:d6:cb:11:
3a:9d:46:a6:fc:fb:75:87:44:d5:35:3c:7a:26:25:cf:70:14:
e5:9b:d8:54:46:2a:9d:cf:d7:62:20:e0:91:53:9a:fe:e9:e4:
df:ef:8d:cd:68:41:72:3b:e0:3e:c6:2a:f9:e0:f4:8a:20:53:
6b:99:12:3f:86:ec:c9:41:47:ee:b6:59:59:05:e9:0b:eb:ad:
98:5c:76:75:f3:36:7f:ec:80:ec:24:83:44:c6:3d:7b:76:8f:
c4:11:17:1d:f7:9c:e9:19:3e:a1:0d:2b:47:5c:85:48:cc:5e:
5a:28:4c:8c:ea:5c:68:ff:a7:ea:04:c3:82:2d:0c:84:47:e7:
7f:37:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:22 2025 by rpki-client