Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: DfXAoAkmfmtTmIJzxuIdZAMrLAie2cVU4jBUC4BMR+Y=
Subject key identifier: 1A:D4:7A:44:77:32:34:CC:A4:64:B5:CD:BC:3A:27:6E:7A:86:1E:C2
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 01975CEEA37C8D1892F347D1F613E48557EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 09F0
Signing time: Wed 11 Jun 2025 03:00:32 +0000
Manifest this update: Wed 11 Jun 2025 03:00:32 +0000
Manifest next update: Thu 12 Jun 2025 03:00:32 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: VkzwE1uLQSRVJoR4OvmnyYvQF8hWNS1UBJamgkjzUJ4=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:a3:7c:8d:18:92:f3:47:d1:f6:13:e4:85:57:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Jun 11 03:00:32 2025 GMT
Not After : Jun 12 03:00:32 2025 GMT
Subject: CN=1ad47a44773234cca464b5cdbc3a276e7a861ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:be:c9:4b:95:2e:65:ce:ed:19:14:c5:f5:
ca:2b:1c:69:36:cd:a9:de:39:a2:30:41:2e:56:6b:
cb:6c:a2:00:62:db:56:46:3c:28:42:6c:99:e6:4a:
f2:43:d9:6f:aa:be:b8:fc:06:ad:54:db:d0:cc:b0:
87:4f:d0:3c:cc:ec:c1:76:41:30:23:90:a3:4f:2a:
3d:cc:75:ae:e6:ac:e9:7f:01:1c:ce:91:6e:96:c9:
c8:24:5d:d7:fc:a1:0f:36:f5:25:90:d3:1a:d1:3f:
d6:e2:b3:a9:26:72:14:b8:23:27:68:ee:8b:df:d5:
3a:e5:c4:a4:70:6b:25:a6:2c:5a:3e:29:9a:57:a7:
01:4a:a8:db:07:f2:fb:8e:d8:05:5d:d7:42:d5:27:
a0:5f:64:c8:65:eb:b8:01:fa:b5:1f:c0:77:99:5a:
7e:4f:f0:b1:62:03:4e:85:73:87:7a:34:0f:e8:76:
05:5e:8e:83:b2:0d:fa:6a:ba:42:73:c6:70:8e:b0:
82:ad:ad:55:19:bf:34:16:4f:2e:3b:86:94:df:ba:
72:da:78:da:f5:d7:81:e6:f4:53:d7:44:59:bf:33:
80:f5:cb:c5:ee:1f:8a:d9:24:dc:b4:c3:3f:12:85:
da:f5:ca:9c:41:80:ca:46:a9:d5:5f:9d:be:1f:a1:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:7A:44:77:32:34:CC:A4:64:B5:CD:BC:3A:27:6E:7A:86:1E:C2
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:cf:a7:32:92:2b:10:c8:a0:36:85:b2:ae:8e:fe:e2:44:63:
27:5c:3b:f0:19:6a:e0:f9:c0:a7:96:22:7b:b1:25:4a:9e:37:
a9:26:b4:f8:4f:85:99:10:6a:16:a6:94:06:a0:c8:83:cb:dd:
63:e0:fe:0e:03:46:0c:53:df:6d:55:18:51:e5:a3:d5:93:d8:
6f:61:6d:40:71:84:27:15:76:73:2b:d2:ad:1e:8d:df:25:3c:
2a:c7:08:14:57:21:9c:62:7e:a5:bf:a2:99:9e:1d:6f:b3:f8:
c8:68:5b:f8:cd:30:ae:90:8e:f9:8a:dc:37:81:86:9c:07:4a:
ee:0d:fd:ef:08:dc:47:31:d9:67:8c:22:fb:25:4e:ff:0e:4e:
a9:a9:a0:92:cd:0b:7d:89:75:b4:c6:f9:d0:fb:09:57:51:45:
af:30:ff:73:88:9d:c7:eb:47:85:d5:da:fa:16:57:11:3d:43:
3d:5c:37:45:c0:56:56:ff:e1:54:bc:ef:62:f1:ad:14:44:27:
ab:71:c4:f3:64:61:03:16:5f:5a:20:b1:2b:89:31:51:7c:e0:
27:3d:52:85:65:8e:fe:f1:fc:84:9a:75:61:11:fd:5e:a0:81:
26:e2:76:3c:3c:d1:d8:f9:4a:eb:80:9e:90:25:18:50:9f:cd:
00:c0:27:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:29:56 2025 by rpki-client