Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: TJ25LJSNmTAauCMXlhPG9PnweHB0QNcP9Y+h2Ics7hI=
Subject key identifier: 02:A3:1B:9B:DE:D1:1A:16:23:20:E2:1B:B8:AC:B5:A4:C9:B2:4D:D1
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 019745C216C2B8B076F542EECB48D367346C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 15:00:37 +0000
Manifest this update: Fri 06 Jun 2025 15:00:37 +0000
Manifest next update: Sat 07 Jun 2025 15:00:37 +0000
Files and hashes: 1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: 1hOjLHbC24DGKkInOCOqhCDLxirhs0/ddCgTteN4hvE=)
2: FzwFRP4-A3VF1cOjtYqnBZUlK8Y.roa (hash: arVJNSKTx0owboHk87Pz6q3TsmBB0DVqu8a1mnGjuAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:16:c2:b8:b0:76:f5:42:ee:cb:48:d3:67:34:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Jun 6 15:00:37 2025 GMT
Not After : Jun 7 15:00:37 2025 GMT
Subject: CN=02a31b9bded11a162320e21bb8acb5a4c9b24dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:c9:10:5a:77:64:53:65:36:fc:ae:4b:c3:
b0:c2:75:bd:a6:e3:bb:bc:e2:64:ef:52:bc:5d:c0:
34:a6:8f:70:b4:96:8f:f9:2f:91:e5:00:ef:6d:ac:
7e:e3:f5:57:e6:ac:cf:31:1b:27:b5:1b:65:ae:e8:
17:59:f7:78:fd:5f:7b:c5:a7:58:72:88:45:06:88:
33:a5:35:10:9c:45:a9:e8:c4:c6:0b:76:1e:bb:17:
99:a0:f9:a0:0d:6e:ae:cd:94:ac:c8:fb:eb:6f:bb:
db:da:95:32:f9:b3:8e:89:fa:a2:08:bd:2e:4f:c3:
92:45:88:e4:5a:53:1d:38:d2:93:c2:e9:78:1f:9e:
f8:b7:c9:6e:bb:57:85:fb:67:73:8c:59:ec:a7:da:
04:25:f9:19:3a:9a:88:1e:6e:bd:fe:39:3f:f2:99:
86:ba:ea:f1:3e:8a:63:ea:12:36:94:1d:c7:d9:2f:
64:29:e8:7f:52:89:87:08:ec:17:b8:c3:44:e2:32:
fc:eb:3a:dd:bb:47:a6:e5:9e:ae:f8:7e:a7:36:fd:
46:d2:2a:cc:60:95:cc:88:d1:55:f0:84:32:0e:ac:
31:40:62:5b:96:93:54:cd:a7:71:53:86:96:57:ce:
81:87:92:5f:98:d9:c4:7a:b2:c5:09:97:7b:35:25:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:1B:9B:DE:D1:1A:16:23:20:E2:1B:B8:AC:B5:A4:C9:B2:4D:D1
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8b:f0:11:fe:31:dd:1e:15:af:eb:e6:29:f5:3c:2c:cb:02:
20:4b:14:a0:73:78:99:2f:84:aa:e4:ea:ce:44:2d:c6:b2:f9:
1e:e8:6f:2b:bd:93:51:db:4c:e7:a5:f1:d9:50:0d:1c:a1:0b:
02:8f:c3:5b:85:1e:2a:b0:59:05:0f:e2:53:dd:2c:38:33:ab:
86:5c:63:73:bf:08:22:95:50:47:6d:68:a6:85:45:7a:8a:55:
ae:40:e1:99:83:d7:00:05:f7:09:ba:ba:66:47:3d:92:bc:e6:
26:99:6c:51:ff:80:f3:3d:2f:4b:e2:ff:97:f3:c7:ba:00:f2:
6a:d2:57:1a:b7:aa:88:3c:ca:b6:e2:8e:35:f2:84:04:f9:9a:
13:ab:1e:07:de:ee:4d:5d:a7:8d:8c:b6:02:15:83:c2:69:4e:
80:5b:36:a6:df:f1:d6:c6:74:83:63:dc:aa:14:2d:cc:e6:bb:
4c:6c:58:ad:93:48:e4:11:ec:f6:7e:6a:c3:42:2f:78:d3:eb:
c3:3f:7d:cf:8b:47:b9:15:a7:42:c5:78:95:12:3c:11:92:a4:
31:6e:fa:2d:50:c8:32:cf:5e:81:b3:ed:05:1f:bb:b0:15:94:
c1:87:94:4f:19:ee:4e:a7:f1:29:80:86:0d:d7:d3:68:95:a0:
3f:b4:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:36 2025 by rpki-client