Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: jH+ntDHquXJgVWDaF7RHamMZ8lrNy27Gww3GpJW6lbo=
Subject key identifier: B2:ED:E1:D4:D0:85:B7:B7:47:3B:BC:91:5D:08:7A:16:E5:E1:9B:DA
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01975FEFA66FF7DECB5633604FDBEEB62154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 1469
Signing time: Wed 11 Jun 2025 17:00:30 +0000
Manifest this update: Wed 11 Jun 2025 17:00:30 +0000
Manifest next update: Thu 12 Jun 2025 17:00:30 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: zyNUtM7ALeGvT7wa5ZE/tZpAcki+9EGLJsK1AAeqYtM=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:a6:6f:f7:de:cb:56:33:60:4f:db:ee:b6:21:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jun 11 17:00:30 2025 GMT
Not After : Jun 12 17:00:30 2025 GMT
Subject: CN=b2ede1d4d085b7b7473bbc915d087a16e5e19bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:d4:27:5b:ee:01:59:e0:b6:ed:05:4e:dc:
d5:82:62:9e:44:a8:12:7e:58:6f:4a:83:30:b2:b2:
80:20:cb:cc:56:fe:3c:73:70:78:d5:c6:ce:e6:06:
ba:b2:9b:a2:33:aa:06:51:36:e7:b0:70:68:6c:99:
cd:fc:7c:ee:3f:49:2b:05:3c:74:38:b2:36:e3:31:
b9:cd:24:43:c7:b2:f1:83:0e:3f:c0:b7:b6:40:6e:
cd:f8:62:b9:ff:53:a6:97:11:9a:ef:c5:de:0a:27:
59:4e:c8:b6:37:3e:c9:18:ed:1e:97:af:ac:40:0e:
4c:63:7b:9f:85:99:ea:89:b2:a7:53:da:50:0b:90:
86:a9:36:88:6e:8c:46:fe:d8:72:a8:15:3a:7c:a5:
fe:4d:23:9b:30:98:fd:f6:cb:86:7b:37:78:39:26:
b8:6e:a5:d4:17:a1:33:6c:c4:7f:cc:c5:c1:c8:79:
e7:31:a3:24:6a:6a:05:9c:43:75:bc:78:45:e6:9b:
fa:69:ed:56:ed:b5:5c:f2:c5:22:e6:ac:08:8f:b3:
e3:bd:d6:44:9e:2d:3d:93:de:63:db:a4:72:55:4a:
14:f6:e5:e5:c8:66:d6:63:89:77:11:6a:4c:4f:22:
02:3c:f8:04:ee:8d:f3:8b:c5:e8:30:6e:3c:b6:55:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:E1:D4:D0:85:B7:B7:47:3B:BC:91:5D:08:7A:16:E5:E1:9B:DA
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8b:4d:f1:ee:a2:87:b1:d9:e7:05:37:45:76:f2:06:7c:27:
04:9c:9a:9c:a1:65:31:58:54:0e:33:35:1f:eb:04:99:4e:d8:
99:98:10:01:5a:c3:ac:a1:b0:5f:a9:b6:af:96:85:01:62:c3:
10:eb:ac:cb:4f:dd:aa:43:6c:d3:2d:b9:bb:73:d6:b9:3c:fd:
c1:2c:d1:02:50:a0:fc:c2:98:38:50:ab:fc:67:18:46:e6:64:
c7:22:ec:75:f3:89:f4:65:51:40:03:09:a6:63:56:fe:91:95:
d6:b0:b7:d6:cb:6e:f1:91:69:04:b9:52:e7:bc:df:58:8b:0f:
6f:aa:d0:c9:02:d5:8e:1d:dd:2f:bf:fe:28:20:e8:3f:26:65:
95:e0:bb:b6:6f:8c:b8:37:de:1c:f6:91:9b:31:9c:84:9e:3c:
4a:bb:b3:21:fb:23:c3:8e:20:73:93:a3:68:05:23:a6:5c:6d:
bf:b5:59:b1:5f:a1:89:5b:08:11:ff:40:fe:0e:f0:cc:7c:15:
d2:7b:2a:9b:9c:01:91:5d:00:cc:69:23:23:09:e3:87:f2:11:
87:a6:24:37:80:88:1b:66:6d:d9:51:9b:56:bb:ac:a1:b5:9a:
9c:4c:fc:25:7c:46:23:ef:3a:fb:37:ce:cd:cd:a9:16:72:eb:
18:ef:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:50:33 2025 by rpki-client