Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier: gQIns+02YbkC0I4j+EzIzn7lMSxw1qkpEcZoPlhAzDg=
Subject key identifier: AA:E1:47:99:F1:0C:81:3C:43:6E:47:C1:76:D4:FE:D1:4C:32:0A:F9
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 0197B5C4EC1B17E02584B5981BFB2AD3D5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 09:01:10 +0000
Manifest this update: Sat 28 Jun 2025 09:01:10 +0000
Manifest next update: Sun 29 Jun 2025 09:01:10 +0000
Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: w8tew/4WSn1M9gxrMBQ8AW5mYoAcNLXmwsVnqh6pFpI=)
2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ec:1b:17:e0:25:84:b5:98:1b:fb:2a:d3:d5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Jun 28 09:01:10 2025 GMT
Not After : Jun 29 09:01:10 2025 GMT
Subject: CN=aae14799f10c813c436e47c176d4fed14c320af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:a7:58:3c:2b:2a:d4:d4:01:ab:bc:74:0c:
41:d1:2b:64:f6:24:bd:58:45:ca:e7:38:e5:98:14:
60:26:e8:e5:a5:43:93:3b:1e:08:06:9c:90:63:85:
84:c4:b3:ea:eb:e6:79:b0:e4:88:63:9a:38:76:3f:
fc:df:e6:61:37:51:34:b0:99:4a:ac:19:e7:50:4e:
43:e6:98:08:63:87:81:58:16:2e:a4:08:c7:b4:f8:
37:8a:bd:56:ce:51:ea:fa:10:38:f2:79:71:24:31:
53:92:8c:88:80:0f:92:fe:6c:a0:d4:2c:78:ca:33:
b7:60:2e:7b:d9:36:68:d9:ee:b9:1b:24:83:7f:b7:
7a:8d:78:54:c3:9f:6e:39:ec:3e:ff:92:0a:46:0d:
7c:9c:c2:36:bd:73:66:14:98:77:ff:bd:bd:85:07:
e6:19:eb:72:5a:db:c8:a0:20:fe:8d:6c:44:bd:1d:
3c:07:d8:75:b7:28:9b:00:20:67:e1:44:7f:97:21:
5b:ac:4b:ab:be:f7:05:02:04:36:b8:c9:88:00:cd:
06:0e:69:9e:5d:1c:4c:ec:1f:08:75:a7:6c:9e:82:
c0:e2:fb:10:f0:93:69:e0:35:9c:23:b0:65:8a:83:
e2:f2:b2:d4:ed:64:cf:ec:a8:52:78:20:34:65:cc:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:47:99:F1:0C:81:3C:43:6E:47:C1:76:D4:FE:D1:4C:32:0A:F9
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:c9:67:3c:ff:3d:40:5b:b7:29:2d:86:f1:e5:21:60:5e:
a1:23:32:f1:93:5b:4f:60:df:55:a5:93:b6:1b:ca:0c:7d:8e:
98:97:1b:4c:c3:bc:7b:4f:e0:14:f1:64:f5:3a:34:6e:a1:a2:
3f:39:4a:9e:02:f8:75:37:a0:96:19:4c:3c:0a:f0:44:d6:ca:
d8:e7:75:ea:d7:98:5e:bc:ed:65:a4:41:3d:f6:a9:cf:0c:5c:
ca:fe:7e:33:a8:c3:63:8b:6b:38:22:aa:75:9b:29:93:06:18:
bd:28:3e:3f:13:a4:ce:57:12:3b:1d:98:84:03:90:fa:e1:6c:
27:40:58:d9:e4:d0:89:9b:cc:72:3c:fc:b6:a2:c8:9a:fb:4d:
60:2b:98:f6:51:15:03:a0:23:f6:67:c0:b1:41:94:80:25:42:
99:cd:aa:8a:1a:51:77:ed:71:3c:08:5b:fd:8e:b7:e3:e7:56:
ed:60:d8:17:13:ac:57:8b:ee:c0:e6:67:8a:f2:c0:36:dd:7b:
3e:d3:fa:05:d3:4e:7f:99:99:c9:b4:9e:40:6d:ee:e3:2c:2c:
e1:1b:dc:78:99:6a:02:83:4a:11:cc:da:04:d1:bb:09:fa:49:
32:8f:6e:05:9e:9e:40:6d:38:42:bc:1b:86:25:1c:7d:11:9c:
16:d8:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:36 2025 by rpki-client