Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: QO8dOO+UYnHxmTu6Dmqv2ikz9wNpDS42Bl9E57qFGxw=
Subject key identifier: 0D:B5:03:05:97:5A:A9:8A:49:D5:FC:98:C3:49:0A:BF:DB:94:74:1C
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 0197B70EAA1351A7F30B669A1E8DF6157426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: vb6gEFuT4kpv8GcYiLmgTc98QA/8m1NGgp+hnwwPEOo=)
2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:aa:13:51:a7:f3:0b:66:9a:1e:8d:f6:15:74:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=0db50305975aa98a49d5fc98c3490abfdb94741c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:46:fd:53:c1:d3:30:28:53:0b:e8:fa:2a:
13:a4:9e:23:44:0e:ed:9c:3b:ab:41:62:83:db:89:
64:50:c7:3e:60:74:1c:d8:c3:08:2d:22:7e:69:49:
61:3c:ab:6b:43:35:2a:ef:17:1a:e2:54:e9:45:42:
94:9b:43:e5:da:02:d8:62:82:78:fb:6e:8c:c6:16:
b0:52:8a:0c:8d:b8:ae:c6:78:f4:73:36:2b:59:f4:
91:ae:3f:4c:77:5a:0a:dd:53:85:94:3e:5e:0e:da:
95:36:21:7c:7d:63:ef:e1:86:78:26:79:e0:9f:37:
96:c1:64:8d:fd:d0:74:91:67:3f:7f:53:c5:d4:c4:
bf:51:d8:91:ac:04:67:a8:d3:eb:f1:d4:ea:e4:00:
55:e7:a1:b1:29:d4:3e:7d:e8:e4:cb:7d:98:59:7e:
a5:d5:16:81:40:6c:d3:8a:57:a9:d6:4e:be:b3:fa:
ff:7a:86:50:da:70:6f:a4:ba:1e:8a:3a:b1:90:da:
d2:7f:8d:7e:42:9c:7c:69:69:4b:bc:2c:a3:e7:6a:
8c:a5:66:ad:67:d9:e7:0c:d6:8b:08:62:3e:4e:87:
29:c5:8b:9d:7f:26:09:23:0c:50:ff:8b:73:9e:da:
a5:0b:8b:bb:dc:6f:8a:d7:47:6a:cf:08:77:e6:73:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:03:05:97:5A:A9:8A:49:D5:FC:98:C3:49:0A:BF:DB:94:74:1C
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:ac:85:8c:38:38:07:8d:74:bc:0f:c0:19:37:19:b2:c5:
88:10:e6:70:fd:4b:4d:bb:ef:d6:62:27:cf:e7:44:42:0a:bb:
8b:63:d1:d6:12:db:bb:42:38:3d:21:6f:cf:7f:39:5b:f8:e4:
84:a3:c6:5f:67:09:30:33:1b:d4:8c:e5:09:95:52:04:bb:e2:
1c:a1:96:46:b6:43:5e:64:5a:91:92:f3:45:9b:95:23:3c:ef:
09:67:1a:ae:ba:cf:b3:f0:81:51:6b:9c:63:3b:bd:1d:71:b8:
25:1c:b8:a1:18:53:16:91:48:a8:00:b5:b6:37:cb:cc:b9:83:
4a:bb:f6:c2:8b:87:c6:a6:c8:d2:56:9c:dc:80:62:6a:32:13:
10:7d:e2:bb:58:8b:da:56:96:ec:61:5b:e7:aa:a6:90:e4:38:
94:a3:34:5d:24:8d:9a:ba:13:41:9b:d2:02:fa:f8:fd:a6:1e:
83:fe:12:45:90:29:53:f2:c6:8b:fc:ee:74:96:8d:89:93:49:
54:bc:0a:1c:87:07:c6:4a:6e:dd:bf:b5:93:64:c4:73:ef:15:
b7:a4:9f:f4:ab:7f:02:c9:fa:73:54:1d:f7:aa:10:4f:56:b4:
54:4b:65:ee:ee:e8:19:10:ba:47:98:87:ec:43:f0:48:9d:b1:
13:3e:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:05 2025 by rpki-client