Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: ozoW2bHX6bt7SIakts+zMfm2/fUgGV5l0d20B3FXacg=
Subject key identifier: D0:2F:30:8D:B8:C3:B7:DE:C4:EB:D6:A0:F2:11:D8:46:AD:93:98:38
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 01974AB1AB083AC7318E0A0EFF57EF40BE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 14:00:46 +0000
Manifest this update: Sat 07 Jun 2025 14:00:46 +0000
Manifest next update: Sun 08 Jun 2025 14:00:46 +0000
Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: Z3KvXhWE0Sj7vvaLqfXj7BHoiourGXbmInpTBWbrQpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:ab:08:3a:c7:31:8e:0a:0e:ff:57:ef:40:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Jun 7 14:00:46 2025 GMT
Not After : Jun 8 14:00:46 2025 GMT
Subject: CN=d02f308db8c3b7dec4ebd6a0f211d846ad939838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:ee:ce:5e:02:88:b1:c1:e0:8a:18:bc:1a:
a7:33:d3:44:f6:81:52:2d:34:be:c2:37:eb:1f:80:
73:79:e5:40:d8:72:37:61:97:f6:e3:5f:04:fd:a8:
99:49:b5:22:c4:85:0e:72:14:22:cf:93:bb:e3:0b:
51:20:8e:f3:e1:92:ac:19:4b:6e:ab:49:87:21:6d:
b5:ce:22:f1:a4:b6:b4:41:f9:25:f1:46:a2:3a:69:
06:76:cf:a1:3c:55:cf:5a:40:3a:d7:60:8c:05:31:
fe:46:e0:cc:fa:7a:7c:ea:7e:69:21:18:d8:9e:73:
de:7d:cb:0b:a8:9c:af:bb:f5:09:96:ae:37:55:97:
e5:1a:a3:2c:fe:62:25:7c:6d:17:f3:ff:54:87:7a:
45:16:12:a8:58:3f:49:9c:3d:eb:6d:19:d9:0d:31:
9f:89:da:d3:d4:82:87:44:e7:97:e2:0a:a1:2e:ce:
50:24:21:97:de:6b:13:41:fb:35:c6:a8:3c:92:ce:
97:ff:82:ef:29:5f:f5:cf:de:5f:60:5c:57:c1:e3:
e0:67:7d:b2:10:ff:cf:a8:4d:7c:42:e4:01:71:fb:
4a:a7:58:ae:4f:9d:e6:88:9e:be:5c:4c:19:6f:48:
04:94:56:59:50:42:1f:80:0e:95:ec:7a:bb:ed:26:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:30:8D:B8:C3:B7:DE:C4:EB:D6:A0:F2:11:D8:46:AD:93:98:38
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:12:81:c6:e3:0d:da:4e:7b:29:0b:b5:14:80:8c:21:22:1f:
29:24:bf:e0:a6:1f:ae:e7:4a:44:db:e1:4c:c6:8c:96:ad:b6:
b1:35:90:52:7d:6f:f2:16:8a:75:50:d8:d8:66:5c:21:43:23:
84:f3:26:5f:99:9f:12:3b:66:bc:e8:ef:b1:67:10:38:c8:88:
21:ed:ae:ec:77:57:dd:75:32:8f:0b:83:2c:24:a7:a6:48:72:
2e:9f:9d:c9:94:67:fd:e3:83:41:46:65:91:e8:91:9c:b8:e3:
4f:73:29:6e:40:8f:9c:8b:6e:98:05:a6:8d:ff:59:cf:18:9d:
67:89:1f:16:5d:16:64:82:8c:c3:3e:9e:90:2d:74:23:6d:2d:
7c:4c:a7:ae:13:ce:aa:9a:2c:1d:28:b0:48:ef:d8:40:f8:71:
64:38:09:e4:33:6a:91:f9:2f:8c:5c:61:f9:44:e9:2c:37:c2:
9d:c1:1e:a5:e9:f0:96:45:c9:e9:d7:9b:b3:7b:08:ca:f0:bb:
64:a8:98:81:e8:82:02:bf:2a:d6:7e:12:eb:5e:28:a0:b3:2b:
de:f7:d2:2a:1a:c6:e2:cd:ed:76:29:d4:70:4f:a2:3b:95:3c:
b4:c8:b0:c9:d1:c8:df:8a:d1:fb:14:49:eb:b2:9c:eb:86:7c:
8f:34:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:14 2025 by rpki-client