Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: noG8fM/UGdXn4xvYReuS5NKqbBXwtN7ev2bFfPvy+bo=
Subject key identifier: D3:28:93:C9:D0:0B:96:A5:F1:A9:E6:D9:0F:11:BC:5D:2F:86:C1:54
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 0197B820EF6DA598727598FE858D5ED5251B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: PRtywfrdEYokdpa1mzlaBxbP+XYBlBiZgCttjXsuchs=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ef:6d:a5:98:72:75:98:fe:85:8d:5e:d5:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=d32893c9d00b96a5f1a9e6d90f11bc5d2f86c154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:c5:83:fd:97:aa:e1:5d:7c:e8:24:28:b9:
6f:3c:0f:e8:5d:f2:50:5e:c3:7d:b3:c4:6c:79:42:
77:b9:08:59:7a:ac:ea:e5:29:a3:17:f6:bf:5a:b2:
9a:03:c5:67:84:36:43:f3:e5:97:60:4b:af:40:d4:
61:a2:5a:91:d7:59:04:e9:dc:75:2d:fd:92:20:16:
64:23:cb:ca:f3:9e:82:8e:17:66:70:65:13:59:6e:
ac:2d:d9:9b:c9:37:55:4c:f1:e5:9b:3a:6d:dd:d6:
a4:48:4a:c3:fd:09:45:85:11:54:13:b1:d7:8d:54:
1e:45:de:37:5b:d7:a4:d9:9a:8b:e7:4c:14:31:d3:
cd:f5:6f:2c:7d:f6:49:84:d0:58:4f:ee:61:75:cc:
d4:42:f5:6b:f0:90:97:1a:ac:94:45:78:9d:34:aa:
0b:56:75:a9:b6:c0:c5:e5:34:0f:b4:26:04:53:d8:
ba:fe:7b:cb:8d:73:c0:c7:99:d3:b3:ca:a7:fc:22:
36:18:75:7e:58:f4:fe:c2:7e:43:da:4f:80:50:21:
d3:d8:ee:5a:00:e2:70:d6:0c:bd:3b:9c:05:f4:be:
b4:5b:47:bb:b3:22:f5:b5:8c:c9:64:5c:d6:7f:18:
46:f5:ec:90:48:91:34:19:50:0e:47:7b:1a:84:d5:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:28:93:C9:D0:0B:96:A5:F1:A9:E6:D9:0F:11:BC:5D:2F:86:C1:54
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8e:ba:19:60:d5:b7:9d:41:29:3a:62:92:06:a7:8a:64:60:
01:77:e5:a4:9d:3d:20:01:90:59:b9:42:b1:c4:96:b0:f3:1e:
08:bf:5c:5c:98:6c:f8:27:61:8f:22:13:37:47:1e:67:26:75:
bc:55:d6:53:90:20:c7:f8:82:2a:a2:29:58:72:a3:49:54:26:
e3:53:0a:eb:2d:e9:a2:f0:3b:76:44:ca:74:c1:89:89:7c:ad:
14:ba:26:5d:90:1b:29:d1:ca:e0:e3:9a:75:80:be:0e:aa:7e:
64:e3:01:7f:b1:ce:d1:d6:04:f3:bc:65:cc:7e:1d:a0:7c:63:
de:d8:c3:95:b2:a8:da:35:ad:49:39:93:e4:36:8a:5a:af:c3:
31:18:4e:9a:db:33:9f:d4:48:6e:ba:d1:fe:69:17:dc:c9:a6:
61:2a:b7:56:2a:a0:7d:3d:b6:b7:df:2b:08:84:4a:94:4e:f3:
57:ff:1b:e7:ea:3f:78:a3:14:f4:eb:07:7b:2b:3f:e5:06:f7:
64:2e:e1:fb:6b:20:b4:67:2a:0a:41:f5:16:9b:46:e9:f5:ff:
c1:04:6b:da:fc:4a:a7:5a:3b:0a:6c:11:89:39:05:ec:69:24:
90:b4:cb:79:44:02:cc:4f:b3:74:cf:c3:14:c6:f0:12:dd:55:
aa:0d:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:35 2025 by rpki-client