Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier: HjjwvdxXyFjJBODa+auXNSfcdaiMjgtM1xvJXqcPv8I=
Subject key identifier: 7B:4C:AA:4A:FC:98:0A:66:EF:18:39:02:6F:3C:3E:DF:95:23:29:73
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0197BB58FF219771356935E9592FC31B779E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number: 12A9
Signing time: Sun 29 Jun 2025 11:01:01 +0000
Manifest this update: Sun 29 Jun 2025 11:01:01 +0000
Manifest next update: Mon 30 Jun 2025 11:01:01 +0000
Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
2: 6C2BEepiCaQMVtCkyhz30xXe8YE.roa (hash: LcW+0th7kvny6qypqSlzBgTR2tOOaIncb1qlmtnhBg4=)
3: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
4: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
5: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: ivfelOkBnFTD5OEwtVvdQrXaIjwp4mwPPkDtdhENMYU=)
9: vBCHQIvxYnn49XpOGJSE4wjSlGw.roa (hash: 7CO1i5aTkd/bHcAyF+TmsIBuS1Bs7EA5n3iwLviSKeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:ff:21:97:71:35:69:35:e9:59:2f:c3:1b:77:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jun 29 11:01:01 2025 GMT
Not After : Jun 30 11:01:01 2025 GMT
Subject: CN=7b4caa4afc980a66ef1839026f3c3edf95232973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:7b:58:ae:2a:04:5c:50:81:26:6f:46:78:
f8:ae:5f:b0:fb:cd:a7:fe:51:0c:d9:e2:c3:d8:84:
b8:cc:2d:65:b9:e3:11:57:d6:10:41:8b:7a:66:0e:
c3:33:4a:55:62:79:ec:b8:0d:79:87:f2:53:15:82:
cc:ff:0f:49:db:2e:67:1f:e2:dd:c4:26:79:d0:45:
87:6b:d6:ae:b7:42:ba:fb:7d:21:d6:d5:96:9c:ef:
3d:b6:70:13:19:25:cf:b9:a4:c7:4e:15:2d:b0:e5:
b1:15:10:2e:fd:68:92:51:d2:8e:56:d5:bf:7b:38:
1b:3e:b0:14:22:45:64:50:ec:0c:64:ba:85:95:48:
c7:8c:08:72:03:2b:0d:bd:d9:04:4e:e9:2b:b9:ea:
2e:e9:c8:bb:9c:eb:42:7b:fc:5b:2e:75:1b:b0:22:
3f:56:1b:4a:59:1c:29:9c:65:35:93:ef:8a:95:ed:
a0:d8:b6:d0:23:d5:ac:07:e7:44:34:7a:bf:d0:44:
e7:31:ee:45:a0:44:a0:ed:d1:fb:bc:34:10:c8:15:
34:bd:44:ca:4e:5d:2e:85:f6:f8:b9:3a:6a:e3:5d:
3c:10:fb:93:74:7c:c9:da:31:7b:3d:54:58:10:38:
4a:56:39:3e:ed:16:61:12:7b:8e:a7:ef:59:59:c7:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:AA:4A:FC:98:0A:66:EF:18:39:02:6F:3C:3E:DF:95:23:29:73
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ce:7a:4c:47:3e:0a:3a:6f:83:ec:11:80:01:1d:f7:d2:df:
b1:fb:9d:b0:53:38:e5:29:ab:ce:d2:f1:98:47:b5:4e:ff:3e:
80:7a:73:77:d4:e6:81:49:42:34:c2:0a:8a:25:b6:2d:f8:32:
5a:ae:d5:46:d3:a7:0f:3a:1c:b1:1b:b9:1a:91:bf:a4:46:37:
17:88:21:46:5d:36:54:14:70:fb:17:a5:79:27:e6:60:18:d7:
2c:61:0a:ee:af:a9:cc:9c:65:86:2c:d8:63:79:54:c8:e2:43:
4a:65:98:c4:55:3f:b3:8c:2a:af:d4:0f:41:16:2d:aa:9f:27:
c6:fc:99:61:4a:b5:62:a4:18:3a:bb:ff:fc:e7:f5:24:f1:94:
9e:12:57:40:8e:73:c6:2b:b4:e8:62:a0:67:9f:79:ae:98:48:
08:c1:14:dc:43:cd:16:7e:94:7a:43:09:17:08:a7:d6:42:1c:
36:14:b8:f8:ad:c1:67:0e:14:49:80:e8:e3:06:bd:a4:c5:d8:
8f:fa:ea:ba:f6:5c:a7:87:28:40:02:37:2d:b8:bb:a8:9f:67:
fe:57:bc:0f:f2:a5:25:45:9c:45:cb:7b:bc:45:3c:09:b7:a5:
92:58:de:82:71:fc:27:fe:9c:60:50:da:96:ba:5e:f1:d2:46:
1c:81:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:31:02 2025 by rpki-client