Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: Skn+VGcSOyCoQQzZjR6/nsrUGQHHyZ28dVHXdFPDwqQ=
Subject key identifier: D4:4A:C6:B5:0E:9B:44:08:85:78:C8:0E:FA:C4:45:0D:5D:BE:4F:08
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019760CB59BE487F23551483FBBF1BE80AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 09F2
Signing time: Wed 11 Jun 2025 21:00:28 +0000
Manifest this update: Wed 11 Jun 2025 21:00:28 +0000
Manifest next update: Thu 12 Jun 2025 21:00:28 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: VBGotD6ADEj+PnMgRFBn6PO3U+2Fzwt1hF9MKP70prY=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:59:be:48:7f:23:55:14:83:fb:bf:1b:e8:0a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Jun 11 21:00:28 2025 GMT
Not After : Jun 12 21:00:28 2025 GMT
Subject: CN=d44ac6b50e9b44088578c80efac4450d5dbe4f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:b6:fe:38:6d:d4:c9:8e:55:b2:fb:e6:11:
a5:cd:2b:48:d0:ae:97:85:0e:6b:26:55:2d:91:a9:
99:8d:b4:da:65:d0:08:48:86:e6:2c:6a:82:50:97:
03:1c:9d:d9:9b:d1:e7:e6:ec:81:7a:18:bf:98:f9:
88:7f:65:7e:f4:7b:bb:07:65:56:27:1b:1f:5a:63:
c2:4d:6f:66:22:93:b3:7b:5f:ea:ef:28:b6:fe:ea:
25:1f:18:0b:15:75:ee:60:b9:50:3d:e7:80:eb:c7:
0a:a0:c7:27:41:f7:a7:ca:88:08:d0:51:4b:d5:42:
9b:02:c0:c3:fc:6e:d7:83:83:d1:cd:36:c2:6e:a8:
d1:5e:b0:91:ad:1c:84:51:68:a3:d3:c2:fc:0a:90:
c6:52:f4:b8:75:fe:28:a7:3d:da:3d:56:2f:24:44:
b7:a1:82:a0:dc:15:63:4d:bd:70:cf:17:b3:fe:f3:
9f:1a:23:d5:f2:ad:35:df:38:1c:87:03:17:81:af:
6d:b7:dd:6e:80:68:0f:e5:3d:c6:c3:6a:01:66:c6:
da:6b:40:b5:bb:fa:d0:f8:8c:d1:a4:62:b2:82:0c:
e1:14:e5:6e:d3:7a:c4:21:08:6c:ed:f5:30:ae:7a:
09:51:da:ba:bd:3e:c3:1b:b5:41:13:9c:c5:67:9b:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:C6:B5:0E:9B:44:08:85:78:C8:0E:FA:C4:45:0D:5D:BE:4F:08
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3b:fb:58:23:2b:38:72:2b:e4:55:97:59:91:ab:26:85:59:
8b:f9:85:d1:ed:18:a5:81:d4:ef:ca:58:7e:14:1d:4e:fb:6b:
90:11:bc:f6:5b:2c:25:3e:53:63:93:76:dc:40:39:10:75:f9:
da:8e:5c:ee:66:3a:a7:aa:ee:37:d3:3e:b4:62:29:45:e3:14:
3e:c6:0d:09:73:7e:7d:69:7c:19:6f:74:11:a9:1e:56:67:0d:
66:3b:74:50:93:a7:67:d4:92:f0:ed:b2:2f:08:6a:44:92:94:
b8:91:90:c7:2c:8d:7b:0c:0d:e1:72:a8:08:f4:51:40:79:ca:
27:5a:32:e6:ba:6e:6e:e8:45:f6:f7:2e:13:8d:93:ec:7a:17:
cc:cc:09:3a:ad:09:53:58:b3:09:fa:3a:20:31:6a:ca:0d:86:
76:ab:cc:68:13:50:36:62:6b:20:ab:41:ea:e3:88:fb:ae:d4:
b7:43:eb:b2:06:41:35:0d:3a:59:0a:24:bc:92:83:4a:6e:46:
27:4e:b2:84:06:b8:f7:63:61:59:93:14:fb:88:63:4b:e2:99:
ff:fb:9d:97:05:3d:a3:66:84:08:0b:e7:da:1f:31:36:d7:08:
9d:a0:9e:06:0a:13:b7:58:a6:71:cc:90:38:95:bf:f1:f9:cf:
a6:a1:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:49:39 2025 by rpki-client