Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: ovVhE3exTf8hE/JaeMzX4DjGowKMm9IVf9f5F4KBhwo=
Subject key identifier: 2C:69:8C:9B:4C:4F:A7:3A:8C:09:AD:7A:08:40:17:8A:FB:CC:F7:11
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 0197B6A17D3DE41EE040E8975A6D1C5D0345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1068
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: vQvlFxp/KgVTSWzp9u/EnOeZZKjuovd5TVaCyjZNfLs=)
2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7d:3d:e4:1e:e0:40:e8:97:5a:6d:1c:5d:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=2c698c9b4c4fa73a8c09ad7a0840178afbccf711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:5b:ea:af:da:6f:dc:3e:33:40:4c:be:d5:
36:12:d9:10:4e:fe:08:49:cc:31:2c:19:23:35:e0:
82:a1:93:e1:41:8f:91:04:fc:7a:99:e6:d8:8f:dc:
6a:4f:32:42:b1:2b:71:32:bc:8b:57:f2:1e:5f:3d:
bb:11:d4:be:c2:e6:56:3d:1c:d8:1d:28:2a:c4:04:
bc:35:04:49:0f:01:f9:1f:91:65:0f:b0:c1:31:c7:
17:cd:21:bd:c4:cd:d9:2d:61:4e:43:fc:07:0e:14:
12:8f:ab:ca:be:c6:a7:7b:65:80:40:7e:73:70:f1:
cf:d1:0e:75:0f:ef:58:30:66:46:71:0f:a4:7e:a3:
40:e0:19:bf:6e:a0:a5:b4:d2:61:e0:32:41:50:ed:
5f:87:c7:ee:ed:9c:93:f1:d8:29:2b:fb:e2:e3:da:
ba:5c:39:af:83:9a:e2:6d:74:43:0e:35:23:b7:b4:
b9:35:3d:c8:aa:a0:b3:3f:46:97:98:5e:3f:a1:26:
10:45:23:0e:b3:34:9a:de:95:6e:f4:ec:27:f8:46:
11:f8:09:48:a7:b4:46:d0:72:83:17:0e:3d:02:5e:
c4:94:11:ae:b3:fe:78:56:ad:5b:1a:c3:4e:f8:f3:
8e:c7:bf:dc:f2:3d:5c:f5:96:0c:22:de:74:5d:0b:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:8C:9B:4C:4F:A7:3A:8C:09:AD:7A:08:40:17:8A:FB:CC:F7:11
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f1:8b:36:69:a7:f8:ba:3a:6d:60:94:ab:96:8d:ab:99:a5:
94:0a:56:e5:6b:8e:ad:a6:f4:a6:c5:4b:d4:69:06:45:2e:68:
6b:74:30:dd:9c:71:5a:e6:e2:37:9d:9a:9f:b4:67:67:9b:63:
94:b3:a4:6c:fc:90:27:b5:91:c1:c5:db:ec:67:e7:38:c8:2e:
99:d3:4f:70:3d:85:e2:c7:9f:8e:b4:f2:f9:b2:17:58:2a:47:
96:4f:9a:dc:1c:ea:60:8b:c0:6a:3f:1c:08:fe:4b:89:82:31:
fd:6f:eb:6d:55:7d:0c:3c:a5:5e:2f:fe:9e:dc:e5:be:76:ae:
f5:19:58:74:a3:7a:54:0c:da:bc:25:dd:24:a1:24:8e:12:8e:
73:10:ec:f6:8e:b6:77:86:bb:d0:94:2c:4e:2f:ab:a3:0e:29:
93:d5:2b:6f:4a:0c:72:cc:3c:a7:bb:b7:6b:80:80:dc:52:15:
43:bb:b6:0f:6f:c9:e5:60:ed:00:91:23:7f:7c:64:07:92:b9:
4a:98:bf:2b:cd:04:20:0b:d0:1d:8f:09:6d:3c:2d:21:15:e5:
32:af:b5:5a:e1:08:c1:00:4c:a9:7c:ae:20:17:45:cb:4e:4b:
da:1b:4c:34:06:5a:cc:a6:f3:5e:d1:ae:79:c9:cd:20:d5:9f:
7b:04:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:45 2025 by rpki-client