Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: MaUpgo+KKeSZ2AwsgxyT8Fkhe9AEx1VVUZgvtmPtq98=
Subject key identifier: E0:99:89:6E:51:AA:91:41:FE:03:97:F5:B2:0A:A7:55:77:0E:1B:C4
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019769978947010838AEB9F255F0D0610F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 146E
Signing time: Fri 13 Jun 2025 14:00:28 +0000
Manifest this update: Fri 13 Jun 2025 14:00:28 +0000
Manifest next update: Sat 14 Jun 2025 14:00:28 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: TLjN48w1czPY9pF3D0Kz6lQT6Mp9jWDcRmHFVNQRYNE=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:89:47:01:08:38:ae:b9:f2:55:f0:d0:61:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jun 13 14:00:28 2025 GMT
Not After : Jun 14 14:00:28 2025 GMT
Subject: CN=e099896e51aa9141fe0397f5b20aa755770e1bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:73:03:7a:0a:8a:4d:d6:98:5f:5d:a6:39:
b1:64:90:8c:a8:1c:26:2c:ce:8d:9a:8e:fb:aa:d4:
c3:02:4b:8b:bf:02:79:41:90:84:46:f2:76:c3:36:
be:f2:2d:ba:a2:c4:0d:bd:10:5b:0d:92:d4:43:4b:
35:92:8a:fe:9b:52:5d:85:65:8f:b0:2d:8d:7a:1d:
74:72:e2:ed:8d:6a:41:b5:ac:ec:92:f4:ed:13:fe:
54:64:ce:a8:1d:c8:61:c5:bb:8a:01:7d:43:3c:4e:
a2:fa:a7:d7:6b:09:92:eb:f8:68:44:76:cd:99:81:
ee:c6:54:e8:96:39:98:b0:5a:83:82:3c:65:7f:b5:
a0:83:27:31:13:61:1b:cb:55:91:c4:3b:cc:ce:26:
1b:c0:f8:86:70:fd:5e:19:f7:e4:d6:b9:15:aa:0b:
1f:c9:8b:6b:58:57:3c:89:e4:6a:7d:9d:ce:ec:00:
40:bd:92:f7:d4:ee:c2:b1:d8:87:f7:ad:af:26:ad:
13:91:0b:5f:99:7f:59:39:bb:a3:69:d3:9b:29:54:
c6:73:02:6e:ff:f4:a9:0b:b6:0e:f7:f4:8c:3c:ae:
3c:2b:4a:ec:48:84:8e:2a:c4:56:2b:33:ea:94:c4:
4d:a8:1c:9d:7c:16:05:e5:ac:f9:3d:c4:76:b8:9a:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:89:6E:51:AA:91:41:FE:03:97:F5:B2:0A:A7:55:77:0E:1B:C4
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:d3:6a:ac:10:f8:46:75:57:5c:3e:88:f9:d5:aa:b1:60:
17:b4:e8:eb:7e:a7:13:8d:3c:10:7e:97:19:d3:24:a5:14:06:
a0:d5:9e:53:42:71:9b:e1:03:ea:f9:b7:50:db:72:38:1d:78:
5f:35:a5:0d:46:7d:26:e8:d6:6b:ce:64:19:b8:9b:97:8f:d3:
e4:0f:a6:18:6d:f1:fd:9b:d3:15:87:d0:5a:15:8c:f8:96:d2:
11:d4:e2:fb:ad:a7:17:3b:6c:ad:ac:7a:07:6b:7b:ac:9c:c8:
47:aa:7d:7b:f8:5d:96:ca:44:f0:e6:f3:6c:ba:43:dd:70:9d:
ed:97:d7:0e:7d:a5:ce:e8:14:92:98:f4:e0:f3:b7:b1:82:c3:
a7:68:a3:89:75:ed:b7:a7:96:24:b0:29:82:4f:67:f6:52:2f:
3d:76:58:c7:7b:1d:53:23:b0:0f:a8:e7:94:57:32:ce:a3:da:
d0:98:b8:33:1c:b5:15:bd:2b:2b:aa:42:c9:24:cc:0c:00:d4:
03:66:e4:58:19:f3:89:1a:b3:d8:e9:a3:fd:e0:97:35:b1:7d:
b9:ff:ce:4a:91:e3:58:80:23:42:94:d7:45:dd:d3:ca:bf:49:
2c:f2:0d:11:f2:41:c8:72:e1:d6:4d:d3:fc:d9:49:a6:2a:32:
9f:0b:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:40:03 2025 by rpki-client