Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: jfIBbsdtozqCbdyy16peUuoBF7A6LpE2qNab1nJ3yoA=
Subject key identifier: FB:97:DC:03:E7:1C:63:FE:40:A1:75:68:47:DC:BD:10:35:6B:1D:74
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 0197D8F59CD111AE9BAB4991C596258C7C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 1573
Signing time: Sat 05 Jul 2025 05:01:04 +0000
Manifest this update: Sat 05 Jul 2025 05:01:04 +0000
Manifest next update: Sun 06 Jul 2025 05:01:04 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: Tol5i9dN0SSldbMZ8lOIZgCDE05BvqDX+3SFI24QCxM=)
2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=)
3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:f5:9c:d1:11:ae:9b:ab:49:91:c5:96:25:8c:7c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Jul 5 05:01:04 2025 GMT
Not After : Jul 6 05:01:04 2025 GMT
Subject: CN=fb97dc03e71c63fe40a1756847dcbd10356b1d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:72:52:7e:f8:b5:29:2d:8a:c2:23:f3:78:
24:15:4f:3e:4d:a3:64:a0:62:0d:61:07:6a:29:12:
16:35:2a:bb:5d:3c:69:e6:3a:50:da:2a:d4:79:ad:
54:f3:08:ad:06:ae:bb:5f:b3:66:e6:80:26:95:a2:
80:46:60:78:d3:12:f5:52:c2:da:19:4b:af:ba:c1:
b7:a5:72:ce:80:8d:01:d8:d1:49:5d:c1:c3:53:71:
de:a2:2f:47:82:d5:95:67:6f:9d:7f:82:00:b5:e6:
4c:e3:e5:6d:bc:aa:c8:1e:a3:d2:f0:f6:ab:73:08:
ed:93:57:f7:7f:11:4f:67:ab:a0:a4:97:e2:99:15:
24:d2:76:eb:b4:20:67:89:cc:74:37:75:8b:da:b3:
7b:02:dd:99:69:e2:fe:2a:0b:37:ef:53:a4:e3:ab:
6c:fa:98:d1:7d:e5:f4:d8:ad:9e:bd:f5:89:76:bc:
88:64:94:e3:af:8e:bc:0b:98:ce:fa:e1:3e:1f:c3:
c3:a5:8e:64:9c:8e:7b:c2:33:2b:1d:6d:c2:07:e5:
e9:a6:05:be:1a:88:91:bb:fe:5d:76:23:db:7a:44:
4b:a3:7b:1d:9b:5c:e7:ab:5b:28:b2:a6:95:bf:cf:
d5:d4:4e:5c:35:07:2f:63:58:dc:1d:fe:5c:57:6f:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:DC:03:E7:1C:63:FE:40:A1:75:68:47:DC:BD:10:35:6B:1D:74
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:92:71:61:a3:91:70:93:5c:49:6b:56:85:d9:ca:7d:6b:74:
6a:ff:5b:ad:c1:9d:e2:f9:88:56:2e:e5:7c:7d:61:41:ae:80:
61:81:ee:0d:ed:f9:ef:df:fb:a1:cc:a8:f8:94:f9:a0:aa:69:
5a:41:58:a3:2b:e4:11:83:db:a3:43:74:a1:1f:25:87:71:6e:
41:98:a4:ae:b1:f0:55:c3:97:89:a6:75:c3:45:92:4a:34:76:
29:fe:bb:47:8c:b6:5a:a6:80:22:c1:02:21:24:0e:eb:a6:11:
6f:2a:4c:49:77:c1:49:c7:7e:cc:a1:a2:30:ce:1e:0e:d1:7f:
8d:b6:f7:7b:c4:ff:55:6a:d9:51:b2:7d:6f:15:24:d9:3c:fe:
a7:f1:a7:02:b6:fc:91:8c:dd:6d:22:52:fa:f6:a5:5c:cd:48:
e5:fd:40:e8:68:37:a4:9a:cc:75:f4:64:40:9a:b1:0b:2e:6f:
ed:fc:61:44:ec:fe:21:36:2e:22:ae:2b:86:c2:f0:b4:66:5d:
cd:84:5d:b8:bc:1b:5e:aa:b2:ca:88:76:ab:5b:93:8e:7a:b5:
f7:b9:b7:73:bf:ce:3d:67:5f:37:91:8d:12:52:fd:d5:0b:59:
c0:d4:4b:c6:b0:5d:78:14:c2:3e:99:56:a8:9e:81:bd:cf:36:
d5:cc:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:08:45 2025 by rpki-client