Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: /xmYTHb6HFfSYz8BSsg9uIQ95LjrtLvgT6+o/xoUydc=
Subject key identifier: 9F:D9:84:05:15:18:F5:10:AF:AF:F9:AA:FA:EF:CB:81:8D:BF:EB:61
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 01974EFBE7EE82BC7CDA526B5F8CA7D262CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 1086
Signing time: Sun 08 Jun 2025 10:00:21 +0000
Manifest this update: Sun 08 Jun 2025 10:00:21 +0000
Manifest next update: Mon 09 Jun 2025 10:00:21 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: /5I7TYdaKIFnajJtHAwWcYEV+R8Go56r/nX3ExUt37c=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fb:e7:ee:82:bc:7c:da:52:6b:5f:8c:a7:d2:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jun 8 10:00:21 2025 GMT
Not After : Jun 9 10:00:21 2025 GMT
Subject: CN=9fd984051518f510afaff9aafaefcb818dbfeb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:c6:2b:c2:00:25:5c:02:30:b5:7a:a1:af:
55:d4:24:02:55:f8:64:8e:36:32:a6:79:e2:13:19:
26:38:4f:0e:79:a8:3e:66:b5:a8:51:4c:77:d1:e6:
2d:9c:4e:7d:68:66:f5:a0:14:71:89:e8:c8:bf:22:
fc:79:06:5d:9c:8f:c0:f3:e4:d9:6f:a3:a5:64:64:
1a:52:2c:98:72:a0:4f:d8:03:e6:92:63:5a:92:4e:
6c:f3:de:38:36:e9:24:da:7a:d4:c9:41:6c:be:90:
93:92:11:b5:54:17:22:aa:44:a6:50:c1:ce:b6:6f:
67:5e:4a:dc:b1:22:2c:22:8b:d6:80:eb:9f:c6:27:
7b:a2:ef:ca:6d:e7:d1:ca:2a:4f:b5:77:a6:87:54:
58:fc:72:74:0a:6d:a5:b2:2c:f3:f9:fa:30:fe:34:
86:be:2d:ba:8c:34:96:9a:05:70:15:f4:0f:e1:48:
77:df:a5:00:0a:18:2e:91:cb:f7:b4:50:2d:a3:30:
3a:72:a9:33:73:4d:6e:eb:a0:66:66:44:89:f5:d1:
1b:6e:63:4f:e2:38:91:af:1a:6f:a4:8e:72:f2:aa:
7e:0d:06:8c:56:2d:a7:2e:ef:12:be:9b:4d:16:ac:
78:1e:54:37:73:3d:eb:06:45:f9:3e:e7:1c:26:97:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:84:05:15:18:F5:10:AF:AF:F9:AA:FA:EF:CB:81:8D:BF:EB:61
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7b:a3:f3:f4:95:89:9c:ed:14:e3:0d:e0:c4:29:5c:99:19:
1d:81:7d:15:b9:e0:06:e5:7d:df:37:eb:8d:1c:07:6e:23:8b:
8d:34:de:73:74:bc:63:78:ff:8c:56:d1:2e:7f:a7:aa:b3:b9:
43:fa:80:62:33:86:99:fa:36:72:fe:c3:64:88:0b:fb:11:95:
7a:e6:49:3e:dc:16:d5:85:33:18:b1:58:c4:33:77:3d:d9:d2:
b9:4a:8f:04:c9:5b:a0:78:7e:ec:6f:8f:9d:09:8d:52:11:4d:
94:18:ef:a6:ff:dd:56:43:2a:93:90:58:97:88:93:d6:a9:d7:
46:0d:c5:73:85:10:3f:cd:3a:0e:f2:25:7f:ac:dc:d6:cf:5d:
f2:9c:d8:01:d7:8d:0e:8b:42:ef:98:7f:46:dc:48:e8:f2:0c:
b0:56:c9:69:e6:75:3d:71:9c:62:71:a1:8e:f7:91:a2:bf:10:
19:d7:8f:09:9e:3a:b5:f6:96:61:43:f4:0b:29:27:8e:da:1e:
15:08:f4:c3:76:9d:77:c8:68:c4:21:f2:42:b8:9a:0d:49:e8:
17:29:2e:b1:11:1d:a3:ae:01:96:bc:c3:f5:4f:31:39:c9:d8:
21:00:e9:2f:4a:04:0b:b2:94:3d:bb:d8:97:d3:df:f0:d3:38:
e4:7f:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:00:42 2025 by rpki-client