Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: MkJ4VZAbaFfe/F9gILgm58locy/scf3Vg9DG/arFMio=
Subject key identifier: 41:9E:25:F5:79:2D:6C:BE:AC:69:35:64:2C:98:8E:B2:C5:1D:D5:B9
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019752343D4255B3C58DC50E7589BD6A64F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 01:00:44 +0000
Manifest this update: Mon 09 Jun 2025 01:00:44 +0000
Manifest next update: Tue 10 Jun 2025 01:00:44 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: KVs2A05pE4TqLwmMF5x78D0LNhGVo0eNikqDaSYQTlU=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:3d:42:55:b3:c5:8d:c5:0e:75:89:bd:6a:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jun 9 01:00:44 2025 GMT
Not After : Jun 10 01:00:44 2025 GMT
Subject: CN=419e25f5792d6cbeac6935642c988eb2c51dd5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:c3:31:cb:f1:ef:af:4d:41:64:b6:f2:7e:
c8:fd:50:13:f7:2f:41:e9:16:57:cb:e3:0d:bd:59:
cb:c0:ab:8c:64:2b:c6:16:49:d6:2c:51:c0:77:5c:
4e:bb:db:54:0f:98:0b:ba:b1:82:5c:f3:91:7f:28:
8a:db:a5:be:77:df:b3:a7:67:fb:aa:45:92:e9:4a:
60:24:d7:c4:33:20:b8:25:ed:d7:44:3a:b7:54:35:
54:29:0f:e5:2f:99:7b:33:98:2d:f7:5d:06:86:ec:
df:09:0a:d3:c5:d4:40:ab:fb:fd:5e:ce:20:3c:8f:
ce:ec:2a:4b:e9:98:13:07:70:49:b6:b4:9c:cd:75:
6e:47:9d:64:86:a2:48:15:33:e3:61:60:be:85:4e:
91:ac:b3:f7:6c:a8:a9:47:d2:14:06:b7:8d:47:78:
ff:7d:44:e1:25:0d:59:22:18:30:a4:eb:2f:a1:78:
b3:1f:fa:a9:bd:b5:bb:6c:26:42:89:15:08:f4:85:
b0:ed:c0:2d:40:85:e2:89:38:c8:e4:7e:9c:62:21:
78:13:0f:bb:94:58:90:9a:7f:56:7e:1a:ef:16:b4:
0d:ba:11:74:f6:70:58:ed:c5:86:2a:08:71:99:8d:
a0:06:25:80:4e:cc:22:9e:a0:e6:a3:d6:1a:cb:0d:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:25:F5:79:2D:6C:BE:AC:69:35:64:2C:98:8E:B2:C5:1D:D5:B9
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2a:cd:0c:16:e4:02:44:0e:b5:f8:d7:a7:1a:91:74:ca:d2:
08:4f:0c:2c:66:22:32:dd:62:83:75:67:fd:cf:9f:83:38:86:
7e:dd:0f:59:a7:bd:eb:95:62:5b:41:fc:1d:35:80:99:4c:d4:
0d:ce:0a:ad:95:64:04:b0:54:13:ca:a6:27:35:fa:e4:f0:54:
81:d4:61:52:c6:21:89:50:1d:05:43:0a:c2:9a:f1:a8:c3:29:
57:d6:8d:0f:23:39:2f:be:1a:67:1b:2a:d7:f6:43:36:68:33:
a4:78:4d:19:5f:ee:74:34:1a:9e:a7:56:68:d4:06:21:4d:5c:
86:fd:95:d8:d6:39:91:a1:fe:06:ef:20:a9:96:74:f7:69:36:
c0:a5:59:b0:26:e3:ed:73:9f:a6:58:9c:c8:b6:22:21:98:1e:
30:19:e1:ee:ad:58:ee:d7:0d:b5:da:cd:15:c4:e2:5f:0c:45:
c3:3f:39:00:05:56:d5:87:34:43:c1:b8:c0:a4:53:88:e3:b3:
19:bf:aa:11:f7:7f:00:28:e6:d3:80:1b:86:33:50:59:f2:85:
70:43:d4:d2:58:11:27:f2:63:d3:29:5c:57:d1:2e:1e:e6:1f:
3b:84:4c:1c:b4:66:57:5e:a8:c4:42:4b:80:5b:3e:a3:bb:59:
aa:b2:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:04:40 2025 by rpki-client