Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: W22tnNROB7z9W/cwlL3jWUuFJDhkHSwVwpn4pJNOsZU=
Subject key identifier: 83:47:75:61:72:7C:C6:BD:F5:1A:2D:B7:21:FE:97:A8:68:00:F4:07
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019745F8D0BF3CC131484BB4F31C45D07A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0689
Signing time: Fri 06 Jun 2025 16:00:23 +0000
Manifest this update: Fri 06 Jun 2025 16:00:23 +0000
Manifest next update: Sat 07 Jun 2025 16:00:23 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: WcJXzZbkUm5nKcKMVOhFBB9xHPc5t6eJd7Vzr8CrfFE=)
2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:d0:bf:3c:c1:31:48:4b:b4:f3:1c:45:d0:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Jun 6 16:00:23 2025 GMT
Not After : Jun 7 16:00:23 2025 GMT
Subject: CN=83477561727cc6bdf51a2db721fe97a86800f407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:0e:08:ba:0c:3c:ec:64:38:94:14:8a:44:
70:42:64:5c:1c:09:70:b2:78:79:fc:f7:68:71:82:
43:7a:bc:5e:25:ac:c3:de:94:47:ff:75:67:63:86:
10:01:a5:5a:34:bc:cb:9a:10:96:3a:ea:31:83:3c:
18:16:b2:90:a6:88:23:34:29:de:80:eb:b4:ba:64:
29:b9:4c:2e:ba:ac:47:b1:d6:69:6e:51:a3:b1:ed:
88:8a:63:b6:2c:bc:d2:16:e9:5e:b5:a5:58:de:f1:
dc:7b:d6:bc:47:e0:87:05:75:92:26:85:d4:0a:a1:
58:bf:d0:b7:4f:ff:eb:24:9e:cd:8e:f4:56:56:0b:
be:36:7c:b8:83:47:cc:1e:a5:b1:37:70:31:ff:7a:
15:91:da:c9:22:b8:8a:a2:2c:dc:4f:3c:84:fe:6c:
d1:c9:7c:d7:d2:59:25:c7:7c:98:68:e0:79:4c:61:
72:a6:5a:fa:f1:df:4b:a5:79:6b:5b:4f:36:ea:81:
f2:e7:34:53:dc:7d:51:e8:8b:f0:1c:0e:ea:33:a8:
02:2c:86:83:79:f5:fc:84:0d:32:9f:8a:e8:99:27:
31:28:4f:65:8e:a0:07:19:c6:f7:9b:69:50:f7:05:
13:d8:40:20:d5:ea:eb:08:db:b7:d3:07:69:81:f0:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:75:61:72:7C:C6:BD:F5:1A:2D:B7:21:FE:97:A8:68:00:F4:07
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:f2:8d:c5:87:f9:22:87:32:a8:8a:cf:ca:64:68:c5:57:
45:4b:21:3b:31:89:ab:17:4f:0e:65:96:6d:a9:ad:ae:46:21:
f0:74:9b:2a:d7:c1:70:b9:8b:8e:3e:3b:d6:34:58:0c:a7:5c:
ca:ed:56:7b:ec:99:b9:65:23:9b:8b:c1:da:6a:bc:b3:c7:dc:
29:3d:06:56:ea:0c:fc:03:dc:09:cd:e6:39:d9:5d:56:87:19:
be:8a:4f:a2:d3:06:7e:0d:12:d1:21:57:f0:3d:9a:bd:06:d5:
58:9b:96:ba:25:81:6c:4c:06:f3:20:ab:ef:2e:8f:ca:15:ac:
ee:08:29:cc:56:85:75:4a:15:5f:1d:17:d4:65:d1:9d:05:3d:
20:bc:96:92:da:12:53:65:33:73:f2:48:38:cf:16:e1:09:4a:
b0:6f:68:65:2d:8d:f0:7f:fb:f2:a0:ec:cf:93:b2:a0:d2:33:
9a:79:28:fd:da:fe:4e:da:51:2b:a2:f9:ce:07:f2:fb:11:4b:
00:06:56:4d:ba:d8:36:b3:e5:18:75:f7:5e:cf:4b:c7:79:cf:
92:11:5c:e1:bf:dd:46:d9:c7:2d:59:50:97:53:45:a5:9f:ff:
2b:65:5e:72:d7:c4:b7:ea:64:ae:b2:c5:26:0e:3e:89:cf:98:
83:46:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:48 2025 by rpki-client