Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: YcW9aoBe5YVzyXjK8S7I/b9ripBODjtc65lxTOHcR4Q=
Subject key identifier: D2:B0:B0:B7:66:12:05:3F:BB:D3:1E:FB:8C:3D:DB:10:30:2D:28:23
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019757C8B16DDA6C15FBF2F1990B1248D812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1589
Signing time: Tue 10 Jun 2025 03:00:59 +0000
Manifest this update: Tue 10 Jun 2025 03:00:59 +0000
Manifest next update: Wed 11 Jun 2025 03:00:59 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: bOoAJFZZUAqOAMTVvA8xeCZ7BmDxEqB6vaKoXuASlbE=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:b1:6d:da:6c:15:fb:f2:f1:99:0b:12:48:d8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jun 10 03:00:59 2025 GMT
Not After : Jun 11 03:00:59 2025 GMT
Subject: CN=d2b0b0b76612053fbbd31efb8c3ddb10302d2823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:57:64:e8:37:28:ec:97:36:0c:c4:6b:43:
a3:1a:bf:25:e8:06:69:ef:ed:a5:d3:77:10:97:09:
f5:cf:c3:e9:96:e3:4b:9a:e0:35:c8:67:12:54:ab:
81:8c:ab:ff:87:a6:fa:51:44:12:df:11:47:f2:6c:
47:0c:21:be:43:5c:19:ce:a0:ba:51:5a:c7:65:50:
ad:8a:6e:29:cb:a5:1c:97:6f:27:cf:26:fa:53:a9:
1e:cd:d6:48:cc:ed:b8:cb:28:5a:40:96:3c:77:b6:
e5:da:19:d3:48:66:30:ed:90:94:5d:4d:1c:0e:e1:
c8:de:d1:35:f4:38:79:b2:bd:dd:49:f1:87:5a:7a:
51:a6:9f:32:90:01:89:82:06:38:2e:96:0e:e4:24:
aa:33:e0:7e:4b:b8:6a:c7:69:4a:c1:60:d9:8a:2c:
10:33:07:c9:bd:53:c3:39:91:5d:07:97:00:2c:e6:
7c:87:5a:56:81:3e:8d:a1:30:fc:6e:f9:c4:dd:e8:
1b:f3:50:06:95:fb:a9:73:c3:82:c1:12:1b:b4:fd:
e7:c1:17:cf:bf:30:21:7a:3a:ee:ee:20:fc:7e:d4:
a2:54:f7:c1:7f:26:7d:e0:9c:5e:54:33:f2:9a:41:
e6:e8:b0:88:fe:28:e1:7d:f5:0b:e9:11:8f:f4:cb:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:B0:B7:66:12:05:3F:BB:D3:1E:FB:8C:3D:DB:10:30:2D:28:23
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8c:48:0b:b7:02:a3:47:ac:5d:3e:b3:b6:5f:66:f6:b2:00:
fc:83:84:02:9a:e1:2f:ce:d2:a1:c1:59:26:99:c1:dc:fe:70:
18:20:e1:47:b6:64:5b:d3:31:13:39:56:ab:aa:4e:ff:6c:c1:
db:0f:ce:5d:32:3f:aa:fe:5a:4a:74:2e:b6:6d:2e:64:64:41:
91:39:a3:73:d5:71:dd:6f:9a:15:58:82:a7:8e:9b:5c:9e:14:
9c:84:8d:f7:2f:7a:77:3f:82:80:cb:e2:c0:58:9d:f5:ef:22:
68:77:12:ac:f4:28:d6:61:33:71:18:ad:a0:c4:b5:2d:bd:af:
77:c6:0b:fb:31:d4:5a:e3:30:44:0a:76:6b:81:6f:ef:23:2f:
53:a9:35:17:63:0d:6a:3c:07:e6:83:05:a5:20:c2:07:d9:d2:
ba:80:eb:29:12:75:76:1a:5b:bb:ac:42:4a:ab:e3:9c:8d:9e:
6d:65:7e:2a:77:9c:09:de:8f:8a:34:45:4c:28:f0:60:1c:30:
5b:71:fb:85:c6:82:96:2f:47:78:eb:ac:59:6c:a4:b7:b9:16:
a8:53:34:30:a4:7c:37:c2:63:38:e7:8c:d7:51:4f:17:a2:d9:
c0:d6:28:24:73:87:a0:2e:df:8e:e1:f1:27:23:bd:3d:47:a9:
9e:b4:14:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:25:00 2025 by rpki-client