Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json)
Hash identifier: HeViTg6+Zhpb7f8SNJX3oj4EniCRJ2YUlFBbhG6Cawk=
Subject key identifier: 8A:1C:FE:CA:FB:6F:81:75:4B:BC:0A:B0:65:E8:B2:CE:F0:1D:81:23
Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b
Certificate serial: 0197B6A1F74E88566EAD026997569977E88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: BPp-br1m8twWuKnnT9fY7MJwn_Y.roa (hash: jSYthsXuRkdrCtZydE+6ZCFDw/F0UdXQcHDK5mHn62A=)
2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: 92dX72aD6sTNy0ctsIh9Xl3UIoyr5Vg6onphyvdNsCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f7:4e:88:56:6e:ad:02:69:97:56:99:77:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=8a1cfecafb6f81754bbc0ab065e8b2cef01d8123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:08:c5:90:82:2a:2b:12:9f:01:a9:35:ff:
05:d7:58:57:80:ec:c2:af:cc:76:b5:86:04:4c:0e:
cc:a3:bf:fa:24:4b:63:7e:5d:81:88:1f:d9:4d:e6:
9f:b2:91:57:2c:40:e7:23:2b:e4:81:cd:81:dc:19:
7f:ac:96:0a:79:33:6f:2e:c8:1b:99:06:02:18:2a:
64:5e:f9:dc:bb:7b:14:6d:47:e7:91:c1:d9:8f:2a:
5e:a4:ff:05:4a:4d:49:27:30:34:b3:b6:73:73:1a:
92:82:d9:4d:52:43:a9:6f:ee:59:97:31:cf:cd:0c:
c9:5e:99:9c:23:20:a3:36:cc:12:99:ce:5c:6b:f0:
9e:23:4d:c6:cd:e7:91:e7:6e:e4:22:14:3b:34:52:
a1:b4:57:45:03:d9:70:f4:e7:0d:d1:b9:08:0e:f0:
4d:78:55:d5:47:aa:29:09:ad:ba:4d:2e:0c:a3:4b:
eb:cb:34:b9:21:53:0a:2a:94:95:c1:a4:c4:f9:57:
89:2b:55:67:4f:37:bb:fc:f2:35:d3:e9:d1:82:2c:
7c:72:7b:09:5e:f5:d3:e1:6d:fa:75:d7:ed:9c:67:
e1:c4:a7:b0:7b:21:14:25:fa:b5:91:e0:ed:e4:c6:
2a:19:25:ea:c9:f5:03:a3:38:ab:e6:2a:02:26:a3:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:FE:CA:FB:6F:81:75:4B:BC:0A:B0:65:E8:B2:CE:F0:1D:81:23
X509v3 Authority Key Identifier:
keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:21:28:46:44:94:9e:8a:e3:b3:2d:23:41:04:24:33:ed:62:
83:ac:84:56:d3:b7:ae:81:b2:97:8f:34:5a:32:47:0a:cd:f6:
f2:57:97:42:c2:0f:99:96:6a:8f:37:d6:3d:37:b6:c0:18:39:
c6:ac:30:26:5f:d4:cf:72:3e:00:56:50:99:78:03:4e:6e:cf:
20:7c:07:3e:ee:a6:a9:39:82:26:8e:dc:f0:d1:72:a9:7b:15:
a4:a0:4c:d8:b4:e0:95:29:b2:e0:ce:11:10:f8:66:5b:64:8c:
03:ac:b1:21:27:18:ea:41:7b:ef:42:e3:19:2e:24:11:91:ca:
93:1b:a9:12:ec:18:65:d5:79:82:c3:f7:20:9f:79:6a:ff:4d:
03:5e:56:70:9a:3d:fd:5f:3a:69:aa:69:3e:ae:17:41:d6:12:
c4:d4:2d:65:fb:aa:34:b2:a4:0e:e7:55:27:d7:3a:d2:fd:d2:
19:f0:e3:bc:b7:07:28:7e:2f:74:7a:dd:3d:66:6b:f8:89:f9:
3c:06:e1:9d:db:0f:3f:3f:24:d0:5b:fa:f2:d4:c7:47:e2:ab:
a5:9c:b1:01:8e:59:5f:16:19:38:35:3b:37:8e:8c:25:e2:83:
83:6b:32:27:d7:b2:42:e5:9a:55:37:4b:77:9f:c9:9b:83:40:
1c:e6:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:58 2025 by rpki-client