Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: o/PWpMtcwDQMwyAhx9HoxMWrfNo0pnh8CbG09UXvaYE=
Subject key identifier: D7:DF:84:4A:15:E9:EE:6B:D5:31:E0:42:38:D3:AF:3F:1C:41:7F:77
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019755DA6796AE48CCC62E60C776319EB399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1588
Signing time: Mon 09 Jun 2025 18:01:06 +0000
Manifest this update: Mon 09 Jun 2025 18:01:06 +0000
Manifest next update: Tue 10 Jun 2025 18:01:06 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: PXMogAUFEPikv9NXs163ACDR/GIA6NZ9ml5nOjpGG1w=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:da:67:96:ae:48:cc:c6:2e:60:c7:76:31:9e:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jun 9 18:01:06 2025 GMT
Not After : Jun 10 18:01:06 2025 GMT
Subject: CN=d7df844a15e9ee6bd531e04238d3af3f1c417f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:84:2d:88:79:30:95:87:de:07:58:af:57:
59:9c:8d:60:ea:18:8e:76:c8:7b:3d:a8:71:90:50:
e8:10:f0:c5:e2:67:14:0b:d1:f8:d4:ca:df:31:42:
fd:de:b1:91:f6:35:cb:46:73:0d:e0:19:93:91:c6:
f8:15:a7:1e:03:70:a8:4f:1e:30:bf:42:a9:34:bb:
d2:8d:59:de:ca:a3:48:3b:8f:32:bc:96:9c:d6:2d:
f6:a1:b4:77:71:4d:f4:1f:01:21:66:bd:6a:d1:1c:
56:60:4a:89:46:14:91:3d:e6:99:57:82:be:7d:59:
f1:41:97:4a:b9:5f:91:e4:a8:e6:94:7c:5f:fc:67:
4d:81:df:bd:b8:95:90:4b:5f:c3:38:ab:2d:c4:1d:
8c:42:14:0e:ed:22:f2:cf:9f:a2:ab:ec:d7:f6:76:
d3:1e:37:22:e1:41:d4:bf:cb:d0:13:4d:f0:43:da:
eb:24:9a:bb:e6:23:02:62:5e:4b:52:d6:cb:d0:e2:
4e:4e:dc:8a:66:bf:a2:37:22:ce:ac:fc:e5:1b:ad:
f1:2c:6b:db:80:3e:74:10:ba:40:5b:66:f3:75:ce:
9f:64:e9:e1:77:8c:2c:fe:c9:d7:bb:4a:7d:a2:e8:
c8:ea:8a:a3:12:58:8e:1a:b4:4f:10:96:6d:af:dd:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:84:4A:15:E9:EE:6B:D5:31:E0:42:38:D3:AF:3F:1C:41:7F:77
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ad:0d:57:5f:a6:6f:c8:c1:e4:e6:7e:e9:83:19:e1:e8:10:
67:51:12:f1:70:04:d8:f7:f4:81:be:e5:86:f6:22:1f:85:75:
2a:f8:8b:65:f8:dc:0b:39:20:49:c0:9a:2b:ff:ee:dc:87:d6:
34:11:f1:b2:47:ee:26:65:0f:c7:32:21:6f:3c:ca:1e:52:6b:
44:6b:8d:a4:9d:6d:c3:00:cb:2e:37:7e:cb:63:90:bd:91:96:
d1:e9:e7:1f:1e:0a:56:bd:d6:35:4a:36:14:69:23:f5:bb:3e:
29:63:9b:67:ba:f9:57:44:da:06:71:27:ea:78:8c:7c:cd:07:
89:ef:d7:7f:8e:c9:a5:7f:95:54:98:3d:39:ca:b6:70:bd:cc:
c2:79:fd:e1:2a:eb:b5:ed:86:f8:d4:53:9b:62:dc:63:02:64:
f7:24:9e:5d:d2:e5:67:ee:37:a0:6a:bf:7a:49:e9:ca:fb:43:
ef:ac:c3:5b:f4:4f:4e:e2:c1:3b:83:e4:8e:68:a7:91:4b:61:
8e:01:f7:ed:b0:30:48:0b:ab:c2:60:85:97:46:1f:18:9e:19:
a9:b9:d7:22:f1:11:ce:81:37:c6:88:68:d3:a3:70:9b:11:9f:
51:64:37:38:c1:c3:77:e2:86:a0:02:de:e5:a6:c1:95:6b:4e:
24:eb:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:07:25 2025 by rpki-client