Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: 09MAxdUPXB+8Weh8xwRxE0eC8gTVsU0M8CSLtvcQMzE=
Subject key identifier: 3E:65:83:C8:27:1B:68:3F:64:26:04:9B:76:3C:C7:3B:4B:F0:DD:08
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 01974967AA56EA79945E5EFBB301F0D32440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 072A
Signing time: Sat 07 Jun 2025 08:00:19 +0000
Manifest this update: Sat 07 Jun 2025 08:00:19 +0000
Manifest next update: Sun 08 Jun 2025 08:00:19 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: sxIHSJAtNPTMFd+hXkxYy4KAtnnhxWqSb02BxMoQukg=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:aa:56:ea:79:94:5e:5e:fb:b3:01:f0:d3:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Jun 7 08:00:19 2025 GMT
Not After : Jun 8 08:00:19 2025 GMT
Subject: CN=3e6583c8271b683f6426049b763cc73b4bf0dd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:ea:ac:63:bd:16:48:3c:94:fa:f3:10:17:
7a:4b:b0:28:43:0b:b7:4b:e8:29:ad:8d:14:09:65:
78:5b:bc:87:fa:8e:8c:32:71:32:74:ee:96:5b:4e:
2a:96:5e:88:ad:b6:a9:40:53:44:d0:03:66:76:fa:
22:aa:c6:d9:c2:29:79:3a:d7:0b:48:00:06:fd:19:
65:8f:09:0f:02:38:39:55:ce:8e:21:76:42:2c:09:
a8:85:b3:27:a1:67:46:8a:b9:1d:40:cb:b1:94:08:
53:ee:fa:05:73:35:6a:37:33:8f:34:06:a8:45:94:
ab:37:75:52:85:94:a6:ac:99:54:3f:67:fb:54:93:
75:03:22:6c:d1:ba:89:8e:53:09:59:02:49:52:a6:
7f:20:ce:00:cb:6e:8c:b3:59:14:e8:c8:35:d6:f2:
ce:6f:13:53:ee:cd:69:d8:73:91:59:4a:ec:3a:7f:
c3:c5:8e:05:7d:92:95:37:cb:a3:c4:f1:b0:44:63:
4b:00:50:18:e5:2c:e6:8c:e5:84:77:9d:d8:6b:0f:
55:9e:4e:47:77:b6:96:41:17:63:e4:b9:d6:0b:78:
f1:d3:0e:f7:da:f5:d8:f5:13:d8:ec:d8:8b:b3:ce:
95:70:5d:ec:fb:25:32:ee:3d:a3:55:5c:bb:7b:b8:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:83:C8:27:1B:68:3F:64:26:04:9B:76:3C:C7:3B:4B:F0:DD:08
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:a4:e3:11:f7:47:34:d0:57:6f:f5:6e:a8:09:ab:81:f6:
53:80:b9:bf:db:75:05:ba:f1:64:42:0f:71:16:a2:61:8b:26:
ef:63:a6:57:e7:7a:f5:d7:14:77:fe:d1:d0:71:a9:31:e7:d5:
47:af:bc:7e:30:2f:32:71:80:b7:24:3c:ab:76:20:66:51:16:
7a:25:81:79:2a:04:9c:56:2a:7a:54:f9:d0:77:58:b1:93:3a:
5e:9d:52:6c:b6:7a:33:b7:90:80:0c:fc:db:9d:3a:16:16:d6:
ec:35:cd:ed:fe:1c:07:a1:b4:93:39:7e:30:f5:37:f7:aa:37:
7a:c8:10:84:90:0b:c8:4e:7f:28:36:05:1c:2e:48:9c:ed:a4:
02:69:04:72:36:1a:6e:08:e8:58:9e:63:da:0f:fc:63:71:9d:
84:e2:4d:19:bc:cd:18:37:7f:73:c5:ae:44:0a:d0:09:6c:87:
6e:7f:8b:1f:6d:be:e0:8b:47:ec:ae:cd:6b:27:ad:09:99:b0:
42:6c:fd:fb:d0:af:2a:c6:3d:29:d1:8e:af:67:76:fe:48:08:
6e:85:28:6c:11:dc:6b:e1:5c:7a:16:21:ec:68:68:22:28:c5:
8f:12:51:78:cb:03:27:b2:27:a0:4c:d6:93:58:8e:ef:00:7d:
33:96:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:43 2025 by rpki-client