Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: 3p1/MkvS2S+E5ggGsXPgYX/Ydi4YvkLj1nNHHME10SI=
Subject key identifier: 2A:23:0F:E6:0B:61:8F:7F:F9:29:5A:BE:F1:7B:A6:A3:8E:FC:04:21
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 0197B7450B451F0D404A08B970C40D918E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 10BC
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: WJ7AUeryXttzPCmE8nVkCs9csqFktOpvW8zNmEV9wbg=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0b:45:1f:0d:40:4a:08:b9:70:c4:0d:91:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=2a230fe60b618f7ff9295abef17ba6a38efc0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:43:fa:ad:65:42:e3:19:85:98:e0:04:e0:3b:
13:88:0e:cb:a9:bf:2c:ed:37:44:71:0f:64:df:93:
c4:df:b4:32:ec:5a:e9:ae:9d:5c:8d:e3:2c:00:12:
82:b9:59:ac:e6:f9:35:51:2d:6f:04:0e:01:73:6f:
fd:a5:76:de:1d:2f:34:73:82:bd:d3:cc:85:03:8a:
a1:39:5d:f6:72:91:de:32:65:5a:2c:04:8c:0a:2e:
67:be:5b:03:00:07:c2:72:68:ca:fa:fe:a7:0e:c5:
22:a8:87:4f:ba:5e:10:21:3c:dd:9d:30:1a:a3:6f:
70:a6:8a:ce:6f:b0:9c:e5:c6:52:f5:c4:98:78:b2:
7f:6c:cd:8e:ef:51:b1:b2:2c:65:94:ef:a3:c0:b9:
70:1d:78:03:5b:74:43:a4:af:90:83:c9:e0:64:6f:
2b:8a:9a:83:99:9a:26:76:38:48:59:3b:9d:ac:4c:
81:25:6b:4f:d4:78:ce:3d:4d:76:62:01:d7:1f:a2:
97:6e:4c:4a:5f:c8:1d:c8:f2:91:1d:96:51:58:99:
84:49:37:02:da:d6:d4:08:38:0e:e8:ca:a3:8a:ec:
da:91:e3:c5:80:49:1f:58:27:b6:29:e3:7f:4e:85:
f3:2d:6b:75:22:55:5a:88:50:5f:db:4e:ee:6c:9f:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:23:0F:E6:0B:61:8F:7F:F9:29:5A:BE:F1:7B:A6:A3:8E:FC:04:21
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a4:bb:0d:a5:65:89:2e:fc:63:f8:d3:51:34:f9:e9:de:23:
a1:93:19:2f:85:22:e1:38:eb:87:9b:ab:24:9f:bc:33:74:92:
26:70:88:4e:e5:f9:f8:cb:96:c8:44:e0:bf:26:da:b6:2a:5a:
49:e5:f6:fd:d4:57:3f:91:44:10:a7:6c:63:f0:2a:7c:bb:3a:
29:a3:b3:a7:f6:1d:c9:41:ce:10:5f:ec:eb:64:ed:fc:a5:bf:
0c:6c:42:87:5c:c9:e8:bc:d1:7b:1f:9b:3f:75:cd:78:42:b4:
ed:61:69:c0:7b:ef:df:90:6e:82:a7:13:bb:e3:be:07:0c:a3:
76:e8:9f:07:40:1d:68:df:3c:5b:35:ea:e5:2f:84:ac:2e:93:
80:ed:b2:3d:22:67:fb:f4:4f:de:02:90:d9:6c:5c:cf:e5:fe:
55:55:f2:0d:70:ff:50:27:0f:af:89:2e:bd:d9:09:f0:02:65:
7b:da:50:9a:0e:9a:ec:96:31:44:68:92:2a:61:ce:73:a5:ef:
d3:54:22:d6:3a:a0:02:64:2a:64:fd:17:20:1a:8f:b1:2e:23:
ed:97:15:5d:ff:2a:bf:60:22:f9:01:e0:46:04:95:dd:5d:3c:
c2:2f:63:93:1e:ec:c2:66:53:c9:54:c1:26:16:3f:c8:dd:68:
4f:5a:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:04 2025 by rpki-client