Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: 9aGBORQJiDerJHsjXcWYhTffqsRba9Wepg39Q0WQYJE=
Subject key identifier: 97:22:AE:55:0E:11:E2:E5:13:FC:BB:DA:3C:DC:D8:59:E2:4F:9C:C6
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 0197D3CEFD716A4E8340569D83598ECC8358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0D39
Signing time: Fri 04 Jul 2025 05:00:47 +0000
Manifest this update: Fri 04 Jul 2025 05:00:47 +0000
Manifest next update: Sat 05 Jul 2025 05:00:47 +0000
Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: sW58ZYNgXqPsxLoZymt0wF0Cou1sAyno8ZuFL5LF8Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:ce:fd:71:6a:4e:83:40:56:9d:83:59:8e:cc:83:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Jul 4 05:00:47 2025 GMT
Not After : Jul 5 05:00:47 2025 GMT
Subject: CN=9722ae550e11e2e513fcbbda3cdcd859e24f9cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:5d:1e:88:85:67:62:64:0c:ee:bd:9f:fe:
6e:bd:8e:95:25:46:f6:c7:03:1a:05:24:7b:ff:1b:
98:ef:2f:70:2d:62:fc:31:2f:d4:10:fb:c8:01:50:
02:c6:5d:6a:93:0f:b1:6c:63:a8:27:ca:06:3f:9c:
1d:aa:10:03:b1:32:05:fa:3b:09:5a:40:65:00:72:
28:87:1b:38:93:4d:3f:38:3b:fe:9d:5d:ee:06:38:
5e:4f:c1:ba:72:c9:77:44:6f:18:ac:aa:21:1d:55:
0c:7b:ca:40:e0:ba:a7:25:3e:89:62:ab:ce:c6:c6:
0d:ae:69:ff:98:9a:ab:42:9d:68:d4:54:9e:b8:98:
41:65:c6:00:01:06:e5:a0:bc:b5:ea:76:6a:13:ca:
be:17:43:0e:c9:e4:96:f6:7b:1d:70:ff:41:de:36:
fc:9a:39:69:b2:76:a4:a3:82:2f:6e:37:2f:88:19:
ad:c3:d0:7b:4e:2a:67:84:d4:07:04:10:91:94:30:
b1:a4:5e:f5:1f:f8:f2:a3:df:23:56:a6:24:aa:34:
2a:2d:74:de:62:83:ed:fc:4c:ad:90:60:90:57:4c:
b1:7b:1f:de:20:50:22:ed:f2:44:22:0a:ca:f5:1b:
55:31:78:c2:ee:09:76:a0:0f:bb:dd:6e:eb:1b:8c:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:22:AE:55:0E:11:E2:E5:13:FC:BB:DA:3C:DC:D8:59:E2:4F:9C:C6
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:09:61:4f:fd:80:75:2e:e1:30:09:5c:1d:e0:15:25:8e:a1:
30:45:4e:59:cb:a7:00:9c:cb:33:7b:a2:32:02:9e:08:c3:84:
88:00:60:6a:98:a9:05:4d:c3:80:5b:c5:b2:34:46:cd:88:ff:
e8:98:ef:20:81:65:7e:70:7e:d4:84:76:99:78:a3:68:15:f2:
93:27:b7:0f:bd:28:3c:71:d3:dc:a1:70:a1:5f:24:f9:f7:2d:
4e:fe:07:8b:29:f2:a8:e1:28:7c:18:0a:c3:eb:40:ed:84:f9:
f5:6a:97:0f:d3:b4:48:26:93:9f:2e:26:45:9b:fe:c6:d0:52:
2b:0d:c2:c7:63:12:cf:10:e6:1d:0f:1e:79:f0:1e:43:95:e6:
5a:b0:11:41:bd:cf:a4:54:60:5c:1a:28:25:3c:2d:84:58:70:
85:55:25:04:0d:47:a6:50:b4:5f:0c:bc:62:42:60:d7:a6:08:
c8:9f:0c:26:f2:af:f1:95:ce:8a:8d:a9:61:56:41:e8:a3:3f:
40:d6:37:f7:8c:9f:a4:35:d2:ab:d7:78:b7:bf:45:53:93:95:
4d:62:ab:28:eb:d2:1c:c3:07:08:2e:40:00:d4:3e:dd:16:e2:
ac:22:3f:1d:ce:60:e9:0c:f7:5f:44:1a:49:aa:c3:da:28:71:
77:cf:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:00:35 2025 by rpki-client