Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: F94ZJZG1dNRk+O5/AJ7MLmKy0X72qlEnTiLxIvhHMFc=
Subject key identifier: 8A:FC:2A:B6:7E:CA:34:22:30:5C:6F:3E:47:B0:6F:32:E0:39:3D:84
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01975F81F66FED5AB71D117879493FC4F713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 158D
Signing time: Wed 11 Jun 2025 15:00:42 +0000
Manifest this update: Wed 11 Jun 2025 15:00:42 +0000
Manifest next update: Thu 12 Jun 2025 15:00:42 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: XY2QGUsBNHMNxjeVvq4XmirAWC6KCzXjqSFYNrQ5XkE=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:f6:6f:ed:5a:b7:1d:11:78:79:49:3f:c4:f7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jun 11 15:00:42 2025 GMT
Not After : Jun 12 15:00:42 2025 GMT
Subject: CN=8afc2ab67eca3422305c6f3e47b06f32e0393d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:54:da:02:df:0c:83:65:5d:fb:59:af:9d:
4d:69:41:be:c8:9b:95:0a:33:1f:dc:70:e8:0e:ac:
d0:55:cb:09:aa:ae:cb:14:f7:7b:a7:8d:95:3a:75:
f5:cf:fb:22:9b:fd:22:f2:aa:ed:64:36:e8:20:62:
2c:c9:9e:fc:83:ed:45:06:3f:c6:56:f0:29:26:5a:
da:a4:01:3c:a9:93:60:27:e7:5e:f7:ab:de:76:35:
a0:5b:00:33:0c:c2:b4:17:44:95:1a:24:1d:d7:02:
97:6d:3f:22:3f:dc:6b:4a:6b:66:78:d4:71:d8:97:
01:47:73:f0:e6:51:d9:d0:fa:e6:43:d9:de:9b:27:
b8:96:67:60:3b:43:9e:43:64:8a:68:ae:50:58:27:
75:5c:65:79:44:05:16:94:a4:18:6d:5f:cf:c2:55:
3b:a6:7d:a6:6d:55:95:79:df:05:99:78:d8:a1:c1:
3c:c4:da:a3:60:fb:a2:15:67:5f:20:a2:d8:4a:fa:
5a:a6:d7:cb:9b:17:c4:f3:eb:d1:3d:14:1b:d4:c0:
05:3f:8e:af:ce:92:03:af:59:ab:49:dc:2e:24:8b:
ea:84:99:65:22:32:d8:ea:fd:14:87:4e:e6:b7:0b:
67:1f:9b:39:4b:e1:f8:67:60:bb:61:67:77:11:e1:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FC:2A:B6:7E:CA:34:22:30:5C:6F:3E:47:B0:6F:32:E0:39:3D:84
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:da:a4:37:9d:65:8f:fb:77:9c:c9:e1:7f:5b:e8:32:32:7b:
3e:c2:a8:b9:12:01:b6:2c:cc:af:35:a8:5f:24:4c:8b:05:66:
4e:c8:cf:c6:02:18:f8:5b:d3:17:83:5a:73:ff:10:23:30:6f:
91:e1:41:b9:6d:c4:8a:28:30:83:21:7c:b1:a6:ca:cc:cf:b5:
ed:8e:7e:fe:82:fc:8c:38:6e:3c:b9:25:b5:51:2b:b7:ab:50:
2a:f5:54:57:b2:48:aa:56:7f:43:70:96:aa:20:5a:e8:e1:35:
94:80:a0:7f:95:d0:04:24:82:6e:4c:ed:ea:87:40:d1:98:77:
52:a7:c6:3a:39:d2:83:87:fd:18:f3:31:38:43:0a:29:cd:17:
1c:e7:a0:aa:d6:24:a8:96:ae:84:a3:16:fa:94:08:cf:8b:87:
61:b2:99:2e:3a:f2:2a:fa:70:48:01:97:f6:67:7f:ca:8e:0c:
64:40:e4:7c:d7:bf:95:ad:4a:b3:e3:e5:2b:39:ea:e2:bb:42:
4d:fe:93:66:f6:fb:b0:a5:98:56:a3:58:4a:1c:fc:eb:b2:fb:
83:d2:40:8f:4b:33:44:ca:4b:d4:0f:86:86:91:62:d3:57:70:
1d:f2:03:63:ac:a3:d5:13:da:43:4d:80:b8:e9:b4:56:cc:01:
c3:12:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:49 2025 by rpki-client