
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: Vp31EycrejGl8JQxpN8m5o8vg+9/7QrT0b2K1amS1Bw=
Subject key identifier: F1:22:7D:66:54:97:E2:3F:56:DC:D9:53:68:A1:C8:F8:50:18:C9:2E
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019748FA9CB4DD6C88F7516B28F67F16A59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:01:12 +0000
Manifest this update: Sat 07 Jun 2025 06:01:12 +0000
Manifest next update: Sun 08 Jun 2025 06:01:12 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: xQzxVleb79+pRNwT+QiEehZQI4vboTUk4tUO19xVqZA=)
2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:9c:b4:dd:6c:88:f7:51:6b:28:f6:7f:16:a5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Jun 7 06:01:12 2025 GMT
Not After : Jun 8 06:01:12 2025 GMT
Subject: CN=f1227d665497e23f56dcd95368a1c8f85018c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:be:35:08:89:b7:5a:ca:07:36:92:a2:ff:
83:14:22:49:d5:68:d4:b2:bc:d4:9b:6f:b8:a8:49:
32:bf:13:f3:56:31:7d:e3:23:c4:fa:f3:8c:d7:8d:
5d:19:d7:e7:9c:77:eb:87:16:77:12:de:bf:96:4d:
9f:a9:72:64:8e:bf:8c:b9:ee:14:70:ca:e9:2e:54:
18:93:b2:0e:35:f0:e6:24:2c:d2:c4:63:e2:80:3f:
02:57:67:6b:8a:25:ed:8b:55:42:6d:93:70:ba:11:
73:64:92:c3:26:9b:ce:19:69:bf:7b:1d:23:4d:ed:
eb:5f:0b:5d:ca:fb:c2:7a:50:ae:2a:7e:25:83:03:
0f:97:38:cc:bb:e1:67:ab:f0:1b:c3:05:84:fa:f6:
b4:69:b0:a7:6d:ef:e6:79:6d:40:c6:f9:0a:12:16:
fb:94:9c:40:16:f5:49:ef:4e:d5:a6:17:dd:56:65:
f1:fc:fd:11:bb:fb:94:94:9f:98:e2:90:fd:45:8e:
02:5a:13:81:32:0a:29:a0:2c:a9:61:bb:10:6e:88:
21:78:41:5d:87:d0:cc:36:2e:0d:28:23:41:f1:e6:
95:4c:e2:85:67:f8:da:4b:b8:75:88:8f:c7:77:d1:
84:eb:cc:43:f8:cf:49:16:bf:df:be:50:bb:77:07:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:7D:66:54:97:E2:3F:56:DC:D9:53:68:A1:C8:F8:50:18:C9:2E
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:92:5a:2b:ad:db:91:bc:fe:6c:c0:74:3b:b7:6c:0d:e8:d5:
54:1a:8e:e6:30:ef:e2:8d:a3:38:b8:e8:0d:37:d0:42:48:58:
26:71:de:c4:3c:1b:0f:78:34:1a:05:08:cd:99:93:f5:6e:7d:
7c:e2:57:d8:09:41:be:1f:fc:57:88:ff:8d:01:f7:f2:b3:42:
c5:d2:49:3b:d8:fa:8e:99:0e:6f:33:98:4e:60:05:0d:ad:dd:
5d:5d:07:bd:82:f7:82:95:40:cc:f2:48:01:8d:a5:f6:5f:7c:
3d:49:bd:42:42:be:cb:65:e7:7f:bd:c8:96:1c:67:32:16:3c:
43:49:39:64:82:1e:a5:41:c1:28:a8:88:7f:0f:1a:e6:92:fc:
36:bd:38:fb:a6:e1:cd:4d:51:a0:f4:15:2e:19:e5:da:23:8e:
69:0f:ee:c8:35:f7:ee:d7:81:b0:33:6c:87:c3:44:ed:6a:70:
3c:bb:04:10:e6:d1:e9:a9:e1:76:1a:66:61:ba:fe:d1:bb:c4:
41:22:9a:25:c9:3a:02:c1:25:0b:79:0e:c1:76:47:fb:25:8c:
30:32:f4:64:ef:51:b9:eb:20:33:23:5b:cd:fc:17:3a:f9:f6:
a6:9b:eb:1b:f7:1f:7c:7c:ee:61:cc:90:f5:d1:52:9d:1c:97:
fa:3d:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:38 2025 by rpki-client