Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: OCNnWwZ8DbI8bWj7JqScnAbMCC5IVS4/ZWO/A6+CGIo=
Subject key identifier: 22:47:F1:B7:62:7C:5E:60:76:55:37:C9:E4:8A:8E:0E:F4:AE:5B:CE
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 0197B7B343BB8E0B44E786B248FB6596C51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:01:08 +0000
Manifest this update: Sat 28 Jun 2025 18:01:08 +0000
Manifest next update: Sun 29 Jun 2025 18:01:08 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: 2ph8KXQpplwYEcbk5pGH2LawmWlc+pql4jMnvJOcjMg=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:43:bb:8e:0b:44:e7:86:b2:48:fb:65:96:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Jun 28 18:01:08 2025 GMT
Not After : Jun 29 18:01:08 2025 GMT
Subject: CN=2247f1b7627c5e60765537c9e48a8e0ef4ae5bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:bd:36:6b:83:80:ef:e9:8d:fd:7c:b7:2b:
4b:e6:4f:02:bc:1e:b9:fc:8a:77:fa:0b:36:cc:35:
3a:36:6e:2f:04:43:22:a5:5b:fc:8f:bd:87:08:af:
1b:85:97:9f:5f:a2:2b:3e:fc:21:75:ec:01:a4:3b:
d8:12:e4:4e:14:d5:d7:ff:0e:b3:d3:5c:3d:89:9f:
8b:09:44:52:5f:01:e5:98:0b:a1:7c:97:f2:b8:57:
52:14:ad:bf:b0:2d:38:65:c0:5b:3c:e5:51:be:a9:
e2:e4:52:bf:80:43:db:b1:7c:78:13:4a:d5:e4:f5:
8c:97:ec:3e:b2:66:35:2a:7b:c6:98:f2:d5:83:d0:
59:82:96:2c:ab:75:70:c0:32:8a:fa:84:d5:30:8b:
76:e1:4f:4e:18:34:db:91:b4:53:56:a5:9d:7e:66:
aa:06:26:43:06:1f:0e:b3:0f:df:41:51:f3:6d:c8:
a8:ba:bb:87:9a:07:02:18:7d:23:32:60:5d:0d:bc:
ec:ed:ee:6b:81:99:e1:a6:41:05:0d:85:89:cc:78:
e0:64:df:6a:c7:7e:d6:6b:f8:a6:8a:f0:b0:28:c2:
fa:05:df:83:b5:77:43:db:be:b8:53:64:16:78:e4:
ba:68:f8:84:dc:7a:f8:ef:a6:d3:6d:50:8c:d4:f7:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:47:F1:B7:62:7C:5E:60:76:55:37:C9:E4:8A:8E:0E:F4:AE:5B:CE
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fe:cd:63:7f:ec:19:67:5d:f0:02:8a:22:b5:31:0c:6d:7d:
86:06:fc:14:3a:98:3d:04:7a:5e:6a:10:eb:01:09:7f:eb:f2:
10:08:85:1a:b3:b5:bf:ee:96:3b:6f:72:81:eb:6d:fc:6f:b3:
96:cf:8b:e9:c6:1b:d1:14:0e:2e:c2:6d:a1:b0:5c:e4:47:21:
82:9c:8a:b6:79:a2:76:a0:14:2e:48:e9:b7:1a:92:d6:4c:0a:
6f:7f:6f:19:97:9b:c9:18:4a:46:22:70:cb:59:ba:e9:bc:0b:
ff:29:42:fb:39:a1:1c:1c:77:20:45:fd:31:6d:2b:16:c4:f2:
30:7c:92:40:a8:48:4d:60:b3:a3:49:09:14:14:8e:39:22:a4:
d7:2d:f3:2f:0f:2a:f0:db:4b:bb:ae:1d:07:c1:43:e5:df:68:
1a:c3:7a:ae:1f:fe:3e:b1:13:04:5c:45:01:81:fb:da:c3:f0:
64:3c:56:c2:17:af:f6:b9:a3:74:16:78:36:38:dd:32:b9:f8:
51:56:cf:2c:46:e0:44:43:94:28:50:72:97:13:e8:df:78:40:
91:ee:f0:e3:16:38:bc:62:34:4e:af:f5:f4:70:45:03:43:1f:
00:9f:ca:7e:bb:81:ed:b8:0e:0f:af:59:81:82:f7:21:f6:bf:
ec:1d:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:20 2025 by rpki-client