Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: rk6G2/gY//JDaS3FImUcCDPFs+GsAvGERJvR1fMA1Ck=
Subject key identifier: 7C:A2:9B:01:7F:CB:6C:03:F8:18:65:DE:0E:76:B4:5C:82:35:FA:03
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 01974B1F16BE3F700D1A7816280861A10787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 0346
Signing time: Sat 07 Jun 2025 16:00:17 +0000
Manifest this update: Sat 07 Jun 2025 16:00:17 +0000
Manifest next update: Sun 08 Jun 2025 16:00:17 +0000
Files and hashes: 1: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: YIgKI/WeSISL/3m2UVDjDq+AfUjRgRCuUnokNvnIfq0=)
2: sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa (hash: vP2EAWCKtEv68Ix4O5DKWgGMPVW5lFga8QKrSKSQB2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:16:be:3f:70:0d:1a:78:16:28:08:61:a1:07:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Jun 7 16:00:17 2025 GMT
Not After : Jun 8 16:00:17 2025 GMT
Subject: CN=7ca29b017fcb6c03f81865de0e76b45c8235fa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:a6:dd:5e:35:9a:79:15:d2:ae:ae:43:c5:
ed:d1:c8:e3:e8:1d:67:c6:15:d7:a4:97:a4:30:e3:
e6:e8:bb:b5:93:cd:db:c7:97:ba:70:bd:f3:25:11:
76:03:23:a6:ae:c9:48:59:6e:60:81:5d:a0:2e:2b:
9e:74:8c:1d:82:7a:92:9a:ea:23:61:3c:d5:1a:41:
46:58:a0:11:54:47:35:a3:ca:a1:d3:dd:c6:3b:28:
3c:89:d3:b3:5a:8d:dd:ef:be:44:05:e3:7b:30:04:
4b:53:d3:27:d2:85:ca:ff:a1:c8:d4:cd:64:fa:41:
cc:ca:c4:90:e5:0e:38:13:5b:6a:54:e9:f4:0a:d8:
0a:b7:5e:ed:62:a6:ea:ce:b6:70:ee:97:e6:f0:40:
26:ce:21:5e:2f:e7:0c:ca:73:1e:b0:5b:11:1a:36:
b7:4e:44:d5:ad:92:8e:ac:db:ad:cc:d7:25:92:87:
cf:09:16:bd:fb:9c:ce:76:f1:12:cd:a1:9a:a7:fb:
1c:4c:34:45:c0:59:c3:0e:e9:1b:b3:7e:9e:69:5f:
c8:3d:c0:3c:7c:4c:15:60:3a:ca:7f:c1:3d:12:2d:
a9:00:42:5b:82:a4:c7:1d:be:1a:6e:ec:55:a7:9c:
11:10:a9:60:b1:c5:35:c4:24:3b:ae:8b:35:91:b0:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A2:9B:01:7F:CB:6C:03:F8:18:65:DE:0E:76:B4:5C:82:35:FA:03
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e6:5c:04:0a:03:ef:d5:8f:a8:6c:e1:4f:02:aa:8a:b9:8c:
b1:76:22:44:04:4e:cd:0f:b9:cd:9e:fa:a2:2a:63:f3:8c:77:
1d:8b:55:90:35:61:b9:79:c0:24:d1:5c:c5:68:ca:e3:32:42:
1e:da:25:86:54:4e:ad:f3:b2:08:c5:34:4c:1b:44:8e:a2:f3:
1f:c4:bd:8b:7a:88:a3:13:ba:f2:b8:a8:63:97:c9:fe:e4:e7:
be:d1:fd:7c:4b:65:35:aa:37:d0:9a:c8:d5:d6:5e:c7:f2:b2:
e0:c6:c3:0c:f7:52:16:c1:f2:85:1c:04:05:63:73:fb:01:51:
d6:33:8d:5e:ed:2a:20:32:f6:04:d4:c9:6f:bb:fc:e2:b4:a3:
3d:a0:2f:a5:88:11:cc:83:89:67:bf:22:a6:83:62:b0:e1:ca:
e0:ec:b2:1b:b6:34:0d:84:a0:70:03:90:2d:02:c1:78:38:3a:
fe:62:fb:a5:b1:95:46:c3:34:1d:eb:a6:b1:b8:42:67:4d:91:
54:5a:92:42:2f:53:cc:30:55:3c:6e:48:59:2a:ed:cc:5f:10:
29:e6:7b:0e:73:a3:99:e8:e2:89:23:94:71:87:73:18:89:71:
18:23:c3:53:60:bd:f1:85:09:a6:15:b3:6a:33:8a:3b:a8:d4:
52:3f:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:34:34 2025 by rpki-client