Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier: 7+v/SjKD2hBTGuxT0Ot06PKzCWH5vfq5ugYs/rU5ldY=
Subject key identifier: 1F:1F:6A:B1:57:4C:66:16:5D:56:D2:E7:E6:A0:03:C9:BF:A9:B7:80
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 019749683B51AE3A842C1C5F0D60AE6E5AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number: 126E
Signing time: Sat 07 Jun 2025 08:00:57 +0000
Manifest this update: Sat 07 Jun 2025 08:00:57 +0000
Manifest next update: Sun 08 Jun 2025 08:00:57 +0000
Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
2: 6C2BEepiCaQMVtCkyhz30xXe8YE.roa (hash: LcW+0th7kvny6qypqSlzBgTR2tOOaIncb1qlmtnhBg4=)
3: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
4: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
5: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: Uv9ckFxeg3rQYvMlXKjaANTfLIKUqhBaXKPZ8wH/VQ0=)
9: vBCHQIvxYnn49XpOGJSE4wjSlGw.roa (hash: 7CO1i5aTkd/bHcAyF+TmsIBuS1Bs7EA5n3iwLviSKeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:3b:51:ae:3a:84:2c:1c:5f:0d:60:ae:6e:5a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jun 7 08:00:57 2025 GMT
Not After : Jun 8 08:00:57 2025 GMT
Subject: CN=1f1f6ab1574c66165d56d2e7e6a003c9bfa9b780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:4b:da:27:93:0c:d8:49:b6:18:d1:db:b4:
ab:b3:fa:9f:11:42:38:c0:66:59:31:a0:e3:a9:c1:
f9:26:0a:84:6b:75:bf:9f:23:41:de:2d:67:37:a8:
c2:60:11:79:b0:ac:64:7d:08:71:50:0b:ca:df:e2:
b3:5c:99:1a:6c:01:15:05:80:5c:39:8c:c1:d1:a3:
48:69:cd:be:88:db:bf:b9:ea:95:d3:37:96:db:0f:
13:2a:1c:f5:76:52:eb:7f:c2:ea:98:f4:75:ed:55:
d1:c8:7a:25:f2:59:ab:fb:9e:7e:20:3c:79:57:98:
c1:60:b0:67:1e:74:ff:36:ce:ec:d4:5b:e2:9e:c8:
12:32:32:b5:dc:ec:31:cd:43:8e:e6:5b:7c:86:53:
e7:cf:25:4e:74:b8:ea:d6:9e:20:62:ef:39:c3:16:
14:4b:31:f1:53:56:6d:37:57:18:82:bc:51:03:b9:
92:c9:b9:ce:e9:62:8b:70:62:56:42:df:98:a8:18:
db:d0:cf:e9:0c:f8:32:5a:e9:d6:2a:7c:1f:14:2e:
1e:64:40:b1:b1:0d:8c:f0:ec:b2:38:ab:53:9a:c3:
98:d9:ec:1b:5c:83:de:7d:6c:d9:d2:43:db:b2:e4:
14:04:4c:d1:6e:68:06:1c:17:33:70:a0:04:a6:c9:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:6A:B1:57:4C:66:16:5D:56:D2:E7:E6:A0:03:C9:BF:A9:B7:80
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:00:44:5e:a7:2e:a3:47:64:7d:1d:4e:98:42:4c:4f:59:a3:
db:d8:d5:6c:9d:ce:2e:8b:b9:0e:f3:95:f2:24:bf:ae:d5:9f:
5a:a4:d2:1c:81:98:45:ce:4f:6e:49:0a:1f:59:4f:92:1d:e3:
0f:ca:c7:96:39:bb:dd:b5:94:e3:da:31:4d:e7:bd:9e:c4:1f:
07:79:ba:f3:e8:c3:dc:fe:9b:b1:f9:69:b6:e2:9b:57:77:5c:
82:d2:99:3d:e9:1e:44:b3:8c:74:73:90:ad:db:ea:dd:6a:e9:
17:06:56:a7:40:b0:62:20:e8:0b:a4:48:ef:f2:19:c3:81:37:
f5:28:b6:1f:63:f8:eb:3c:a9:db:85:06:07:b2:bb:f3:3f:dd:
fd:bb:fd:3a:dd:f9:8c:8e:b1:0e:08:4d:bc:4a:7c:60:0f:79:
20:cc:04:46:05:ee:8e:86:37:0c:f5:be:47:23:ac:ae:3f:1d:
49:8a:31:d5:43:3e:3e:da:9f:2c:3a:5b:7f:cd:d1:bf:0b:fd:
fe:5f:b3:36:d6:3c:70:9b:12:91:a4:96:9a:fa:9e:d9:61:e2:
e8:3d:8f:d8:8b:d9:31:59:db:d9:14:06:80:8a:d8:13:da:52:
e3:0d:8b:ec:4a:b0:c7:a4:f7:bc:8c:38:26:1d:46:84:53:ab:
d7:28:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:04 2025 by rpki-client