Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: SrnCU0vc+CZbYWgLu6QMcj0OooIG0Oysw6kegBwriuU=
Subject key identifier: D7:3A:1B:28:C5:BF:B5:75:80:EF:B2:38:9B:6B:DD:A7:B3:1D:F2:7D
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 01974C3223F698CF08CBAD8BADFDB8E70078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 21:00:43 +0000
Manifest this update: Sat 07 Jun 2025 21:00:43 +0000
Manifest next update: Sun 08 Jun 2025 21:00:43 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: QbCpy7ZS4TgQnzVwvAmDgZhyC32VuNIPtOq8dKk1y4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:23:f6:98:cf:08:cb:ad:8b:ad:fd:b8:e7:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Jun 7 21:00:43 2025 GMT
Not After : Jun 8 21:00:43 2025 GMT
Subject: CN=d73a1b28c5bfb57580efb2389b6bdda7b31df27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:de:b1:fc:3c:f1:93:5c:c8:14:85:df:7e:
a8:1f:0c:bb:b7:e4:1c:4a:ed:f7:24:93:97:de:0b:
b5:ac:47:7d:b4:b5:b7:f9:77:f2:a5:d9:b1:bf:87:
25:2f:aa:f2:ea:69:e5:42:84:46:b1:02:06:a8:0c:
83:f5:30:38:a0:6a:4d:14:a7:d1:f3:4c:cc:f5:73:
71:ea:cb:03:95:ae:63:9f:e1:1a:1c:35:66:07:1d:
1f:87:61:76:ac:4d:7b:a8:c7:48:b5:85:38:ea:3e:
32:36:05:76:4b:7d:57:89:bb:33:bb:18:36:47:1c:
72:84:d3:6d:45:28:d8:30:28:2d:0a:23:e7:8e:d4:
57:96:a0:87:17:b2:22:87:50:32:29:a4:d6:cb:c6:
2c:ce:d3:2c:28:7c:6a:05:a2:f0:ec:9b:ba:cc:54:
6f:f2:9c:ba:64:19:c8:3f:75:f3:3f:e0:d8:9c:53:
0a:ca:78:d8:53:c9:a8:20:0f:b1:2d:43:14:4d:e8:
57:d3:07:a2:57:10:5c:9f:a7:fc:8d:01:96:79:97:
77:9c:8a:de:5a:e8:39:b8:43:9e:7d:0d:56:e3:c7:
1f:2c:37:d1:57:57:1e:06:3c:a8:88:8c:11:64:bb:
a6:b5:16:12:8e:1c:9c:f8:4e:b7:de:b1:d2:b0:18:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3A:1B:28:C5:BF:B5:75:80:EF:B2:38:9B:6B:DD:A7:B3:1D:F2:7D
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:75:45:1c:32:50:55:9a:7d:85:47:c4:21:83:5b:b6:18:41:
0d:c8:4c:17:51:84:7e:dd:cf:db:c0:88:e0:58:e5:b3:c1:ff:
d4:1b:d1:ef:68:a7:40:97:ae:6c:37:26:a6:78:37:3f:e1:2d:
3b:bf:1f:fc:c7:0d:37:6e:14:f3:fc:cf:ca:88:12:80:69:d2:
2e:44:79:33:a8:02:10:2e:70:4f:7c:b8:32:f5:61:e5:aa:12:
6b:de:39:3d:d1:64:8e:9d:62:6e:9a:0a:bc:47:72:5b:7d:71:
21:b2:a7:98:f5:33:40:86:39:12:35:57:a6:df:9f:b8:70:5f:
5f:8b:90:be:e1:30:24:94:9b:a3:56:c6:e1:da:8b:ee:54:4b:
9e:ce:c5:16:01:5e:13:34:85:bb:8c:b2:7d:83:e7:28:ef:57:
7a:35:7f:19:97:b4:5c:d5:54:c1:02:fd:3d:6a:fa:51:9d:0d:
4f:d1:9e:2e:60:db:d1:45:ab:8b:c2:7f:cc:ec:a8:f1:6c:4d:
d9:0f:ce:83:47:af:96:6b:07:82:40:35:d3:77:5d:a3:45:99:
3a:cd:d5:d9:f3:d2:ad:5e:74:f0:a0:e6:78:4c:d0:08:42:ff:
e8:bb:96:90:aa:69:f5:f8:56:f5:d5:33:0d:72:33:a5:81:a0:
a7:71:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:48 2025 by rpki-client