Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: 4klrFeR0v0WmiRldi4Qx53WmZG5Zrqek5tiPD1c81mk=
Subject key identifier: BC:F5:C2:6E:27:97:F7:FE:D2:21:F1:F7:59:CA:A6:EA:D3:98:0B:20
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 0197DAE3B2D2DC4FF329EE319D770748C51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 15C6
Signing time: Sat 05 Jul 2025 14:00:44 +0000
Manifest this update: Sat 05 Jul 2025 14:00:44 +0000
Manifest next update: Sun 06 Jul 2025 14:00:44 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: Ac7qDWV6jDBexg0rMkWCLL70IKbhKzcnsiBvSVFs9Qc=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:e3:b2:d2:dc:4f:f3:29:ee:31:9d:77:07:48:c5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Jul 5 14:00:44 2025 GMT
Not After : Jul 6 14:00:44 2025 GMT
Subject: CN=bcf5c26e2797f7fed221f1f759caa6ead3980b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:6f:79:bf:ee:90:89:96:0f:ab:0a:dc:de:
b7:b1:51:ba:bb:13:e5:4d:2b:8c:f4:bd:06:92:2a:
96:13:bb:09:ce:9a:7e:fd:91:b2:1c:ae:8c:47:31:
4d:51:ff:f4:7a:8b:5a:eb:b0:48:69:9e:42:3e:73:
6c:96:6b:45:d3:7b:59:e4:89:50:a6:e6:3b:39:94:
9d:4d:19:6a:3a:8f:b0:d9:0f:0b:c6:4f:c0:c2:74:
f0:d9:28:fa:42:e2:b8:85:5a:c2:b0:08:c1:b6:88:
b3:2e:98:aa:05:44:52:cf:f4:fb:63:c4:76:1d:9d:
cd:10:80:e1:b5:d7:a1:78:53:d5:07:9b:51:66:41:
4b:37:13:81:2b:75:e4:d6:9d:f0:92:6c:40:8e:62:
af:63:16:54:3a:15:ec:3e:c2:09:df:6e:0f:33:6c:
c7:3c:59:72:fe:74:5f:76:6b:55:71:30:34:38:a3:
6e:85:4a:a3:83:18:6b:dd:96:b5:a9:b7:a3:90:83:
af:2b:fc:d4:07:bc:c5:ac:79:af:dd:0a:64:2a:8d:
ab:fa:76:ea:a4:8c:cd:f6:87:6a:ff:0a:0d:2f:88:
cb:a8:d5:31:85:e7:75:4c:df:09:26:db:ce:d9:72:
04:8c:66:0b:2b:7a:bc:79:af:4a:e9:bc:c8:40:fc:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F5:C2:6E:27:97:F7:FE:D2:21:F1:F7:59:CA:A6:EA:D3:98:0B:20
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8a:4d:cb:4f:60:f1:c6:cf:b7:c8:6d:cb:71:b5:22:2b:78:
3a:d3:8c:88:d7:9d:a1:9f:9a:ae:ad:3f:24:e1:ce:df:ca:de:
d3:47:bd:27:20:70:63:45:d4:1d:8a:1c:6d:10:f2:91:13:20:
d9:cd:1f:c8:6d:0d:be:2f:14:de:ad:dc:6b:6a:19:3e:f8:1d:
0c:11:9d:ec:37:82:7e:1d:fe:c7:01:c0:37:48:8a:ed:81:0e:
97:00:2a:c1:85:6f:ee:ba:08:39:ad:58:d2:60:f5:d8:d2:05:
a1:04:9f:2f:b7:8d:84:c6:ce:57:c6:95:21:a1:1f:c2:0b:90:
af:35:a1:14:9d:bd:ec:c7:d9:50:99:3f:5e:2c:03:86:23:d5:
3c:ba:20:cc:22:aa:20:aa:18:0c:b0:01:01:1d:08:3e:d3:74:
5a:e2:e5:bb:a2:83:16:3d:f7:5f:c2:6c:a7:ae:51:67:b4:22:
1a:da:3d:39:b6:77:7a:5b:74:fa:fc:28:c2:7d:de:09:d0:a5:
92:b4:07:c5:94:7b:73:6b:c9:96:9d:2c:b5:e7:2f:6c:ef:03:
ae:e1:ad:e5:1a:49:d6:ae:bb:cf:f8:b3:e4:7f:34:02:cf:71:
d2:df:ce:de:e0:ea:a4:ff:06:9f:5a:63:cb:e1:f9:4a:30:1c:
12:2b:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 16:40:25 2025 by rpki-client