Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: 6S/a5nfqeaCILxI1AFaY3Sk6wLHmg4L2T01hxvZBc+0=
Subject key identifier: 87:28:CD:FD:74:E5:5D:00:8E:85:D3:29:AA:50:D5:70:D5:C5:30:D8
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0197C349C6306534FE1278A4E934E611B043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 15BA
Signing time: Tue 01 Jul 2025 00:01:21 +0000
Manifest this update: Tue 01 Jul 2025 00:01:21 +0000
Manifest next update: Wed 02 Jul 2025 00:01:21 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: FXYh/ihPwyvr0KO760kh0kj5Wsn18Z8TTCO7Awwfrf0=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:c6:30:65:34:fe:12:78:a4:e9:34:e6:11:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jul 1 00:01:21 2025 GMT
Not After : Jul 2 00:01:21 2025 GMT
Subject: CN=8728cdfd74e55d008e85d329aa50d570d5c530d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:74:aa:78:43:a1:18:25:3f:7a:51:b9:bb:
7d:03:1f:80:37:71:64:d4:96:d0:51:c6:1d:22:5f:
ca:ce:11:c2:d6:18:17:6e:03:35:4d:8a:f0:ac:83:
b8:6e:78:ad:41:a5:90:a1:88:af:bf:76:87:81:e6:
2f:58:ea:fb:03:33:8e:cc:bc:51:4c:ab:4c:5d:51:
89:84:14:74:55:cb:f3:3a:00:19:bc:7d:7e:9a:28:
ba:e1:68:a6:f5:ea:3e:d1:6b:51:a2:cf:77:b5:ce:
50:26:7f:c3:34:8e:fb:4d:47:57:89:a6:af:f0:6d:
2f:91:06:df:32:ec:16:67:12:9d:6c:a6:34:1d:44:
aa:87:3c:d5:0e:12:24:a5:a8:37:af:23:d7:01:ce:
2e:36:0a:e1:dc:0e:79:f3:36:55:08:df:49:da:6c:
6b:b4:3c:41:25:ce:72:88:e0:9f:c5:5f:f4:d0:70:
f1:de:98:65:35:c7:34:5f:e8:7b:2a:89:a1:2f:4d:
a9:92:d5:63:d2:4b:c5:c2:e0:70:71:69:99:c7:58:
5f:25:80:2b:5b:a4:86:2c:2a:e3:9a:09:c9:83:46:
7b:dc:f1:4f:e5:20:4b:c8:1d:2f:2a:bb:d8:04:ff:
fa:29:6a:03:20:e5:cf:47:0d:c7:f6:03:c0:91:f7:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:CD:FD:74:E5:5D:00:8E:85:D3:29:AA:50:D5:70:D5:C5:30:D8
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:f5:fe:ee:2b:74:a3:07:36:2d:e2:8a:5f:b4:09:62:fa:
8d:74:11:f0:64:43:0f:a2:f9:22:ea:5e:5b:c9:3c:93:a2:e1:
07:69:cb:df:28:35:19:97:2a:a0:a5:c6:bd:03:9a:70:2f:29:
ac:e6:65:04:a8:ed:33:d0:49:e0:2f:ec:d7:ff:c0:43:dc:d7:
b6:1d:e9:1d:a8:d8:5c:5f:e6:1b:fa:1d:12:65:7e:5c:41:ef:
96:16:bc:06:fe:aa:7d:5a:cb:b7:9d:cc:7e:d6:01:75:2b:e5:
4b:c1:40:ed:e9:52:21:3f:0f:3f:46:b8:c0:b1:ad:6d:89:04:
22:c0:14:b7:c8:be:95:0d:30:fd:81:c9:0b:5c:fe:ec:f6:7f:
a6:e7:9a:cf:48:af:94:3b:00:81:64:ff:58:54:65:e6:61:0c:
29:e0:c3:8a:67:15:2b:55:63:8e:4f:1c:b0:b5:63:d3:cd:2c:
cb:9c:22:f0:39:9f:4e:46:10:44:05:84:8f:51:ea:c8:f1:53:
e8:42:23:86:cf:8b:a3:81:dc:f6:ec:08:31:71:1a:a1:df:f3:
11:8a:38:fd:6f:be:24:a2:a5:66:04:5c:28:6d:86:9a:e6:d0:
65:66:a9:3d:07:cf:96:39:d2:5a:b8:2a:2d:e6:48:a0:d4:ed:
e6:b9:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:25:49 2025 by rpki-client