Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: jfuQSoWuURB5uHqweUcck1c86s5hRKo52V0VKcG4bng=
Subject key identifier: 98:D2:9B:D2:9A:73:4B:05:4C:05:36:98:84:D8:59:89:53:8E:F3:C7
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01975DCA75AE73E03DAF5FD3B91CDA3095C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 07:00:38 +0000
Manifest this update: Wed 11 Jun 2025 07:00:38 +0000
Manifest next update: Thu 12 Jun 2025 07:00:38 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: PJSN9s12ThOto5nJexwzNV8M+kopucYpJlRbtHDlM4k=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:75:ae:73:e0:3d:af:5f:d3:b9:1c:da:30:95:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jun 11 07:00:38 2025 GMT
Not After : Jun 12 07:00:38 2025 GMT
Subject: CN=98d29bd29a734b054c05369884d85989538ef3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:19:25:9f:cf:2b:95:f6:a5:38:11:1f:62:
ae:01:70:cb:77:af:1c:7a:fd:24:6e:3d:f8:38:a1:
ec:59:56:be:9b:6b:a5:cc:82:e9:e4:74:0e:fe:d3:
15:5a:05:b4:9f:bc:e8:1d:d5:dc:40:e1:84:14:af:
65:41:5c:54:68:b0:71:a7:06:cf:0b:8e:e5:11:c0:
2a:4e:aa:7b:92:b6:0d:e3:6c:b2:ee:3a:66:ea:c4:
1a:e7:72:88:01:20:e5:69:30:5e:e8:12:69:ef:27:
bd:22:10:2f:58:ea:bf:fd:85:84:3c:8b:e3:b0:14:
49:b0:8f:26:7c:17:0d:f4:3c:4c:28:c7:01:f0:67:
33:ea:e7:12:44:3a:94:77:65:9e:ef:e5:f6:83:a0:
8d:f1:9d:10:c0:3a:ba:cf:b5:96:94:4d:eb:31:94:
dd:10:70:ff:e6:0a:ab:be:3c:8f:20:f1:77:59:f9:
08:54:d9:40:ba:04:98:5e:b1:de:7c:e7:2e:ae:b4:
e1:ef:61:94:bc:a4:f0:10:93:7d:86:79:3e:8a:d4:
25:0a:ac:73:06:0c:bb:05:96:6e:08:3b:d9:c2:71:
55:45:f8:db:c3:d0:3a:18:03:59:26:68:bb:79:79:
1b:a2:0c:00:e4:fd:48:b6:74:92:44:89:4b:5d:04:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:9B:D2:9A:73:4B:05:4C:05:36:98:84:D8:59:89:53:8E:F3:C7
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:33:0a:79:bc:64:cb:a5:19:5d:b5:b0:5c:13:0f:6f:ac:fc:
b5:0d:0b:71:0c:ce:c6:18:a3:fd:b8:f9:43:75:87:99:d1:6f:
89:88:8c:de:fe:09:a6:db:e6:35:9d:b6:1a:22:a0:7a:36:7d:
2f:85:0d:3c:6d:66:8a:aa:8c:3c:cf:aa:58:d3:5f:8c:e6:3e:
3a:27:c7:a0:44:48:7c:4f:57:07:4a:e2:55:60:2f:ad:4c:23:
27:31:4c:02:8a:1e:d8:be:99:bb:5a:34:05:f2:d6:0d:b0:3c:
83:f7:0d:4e:99:58:58:7f:da:84:1e:58:a3:ea:15:d7:62:ea:
11:bd:c8:b7:a9:4d:f5:9b:74:d1:60:51:ae:d2:66:62:e6:1a:
5b:51:a8:52:7b:61:af:d7:fe:9d:39:39:e9:d9:6d:68:cc:bf:
64:5b:07:fe:f8:26:36:4a:07:92:10:35:6f:10:5c:3c:48:4d:
1d:79:70:9f:2c:91:a9:de:e1:66:d3:a3:39:95:2e:69:ab:11:
c5:b1:fb:e5:bf:8b:2d:9d:57:ee:ac:8f:23:bf:75:97:2b:88:
f9:e8:f1:81:79:06:a4:9a:72:b6:2a:65:62:d8:5e:c3:e1:c3:
21:35:cd:18:35:9d:16:87:3e:fb:85:01:11:5e:96:1c:cb:c5:
18:47:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:33 2025 by rpki-client