Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: eps7Iw2kZpjqTsrTLS3oud62tFHmguRDkOcJhJ7hXXc=
Subject key identifier: EB:FC:89:28:14:62:F5:41:54:37:95:EE:14:B7:CB:D7:28:FD:AB:2A
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 0197B6D75738EDA60343241DAD08231E9B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0F9B
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: OcC/bQ6pG6VE0N1yVn5M/eSaP6TS1Irg/7BNfWGG0q0=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:57:38:ed:a6:03:43:24:1d:ad:08:23:1e:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=ebfc89281462f541543795ee14b7cbd728fdab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:36:3d:70:be:e2:98:ec:5f:c7:70:ed:35:
c2:09:08:54:18:bd:94:d0:6e:45:27:27:df:dc:20:
c6:10:8c:6f:82:29:a0:27:76:ed:81:7f:c8:df:6f:
4c:31:91:48:90:e0:e4:29:c7:6a:6f:06:cd:18:23:
d5:7c:ec:f4:1b:87:98:f4:a7:ba:c1:0e:21:e3:3e:
62:8c:74:1b:a4:d1:23:d4:0c:c8:70:33:d1:6f:00:
39:a8:8d:33:ce:85:f4:7f:3c:04:2e:23:1f:ed:fa:
0f:32:76:f4:08:dd:4f:ac:8f:73:45:6b:e5:86:5d:
01:1b:57:11:2f:ab:a8:a8:77:3c:c6:b7:d9:f3:29:
9d:ae:62:d9:dd:f8:51:37:50:49:e9:1b:42:e4:f1:
1b:02:be:e1:a2:7e:03:55:d8:62:24:2e:61:fb:f3:
d3:81:b3:90:c9:c6:1a:c1:d8:e4:37:7d:d9:ae:7f:
96:22:b0:d7:7b:b0:8f:c6:15:60:4e:6b:13:01:a4:
fa:e3:cf:1b:14:42:8b:f4:f1:7b:a3:fb:bf:ea:47:
97:bc:84:55:7c:ab:86:2e:f0:0c:e2:a1:50:b5:81:
cd:39:3d:18:25:66:4e:49:b1:2d:91:47:19:89:ba:
ab:a2:67:38:38:9f:a4:8e:d3:93:9d:9b:0c:21:db:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:89:28:14:62:F5:41:54:37:95:EE:14:B7:CB:D7:28:FD:AB:2A
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2c:7c:a9:ca:24:34:08:78:61:fc:1e:73:7c:fa:cc:56:58:
cf:f6:43:06:1f:ea:9a:d1:c1:60:72:f7:52:b4:1c:f5:df:e1:
46:c1:16:ac:49:17:22:97:a8:44:20:c4:6d:fb:58:fe:5c:0b:
1f:79:66:41:e3:26:cb:8c:27:7d:f0:33:a4:a9:67:5d:43:b5:
9e:5c:9e:96:b3:3b:16:be:f7:d3:a6:90:55:20:21:23:d9:ae:
60:1e:77:73:cb:36:1a:10:b4:cc:31:8e:5c:bc:40:00:9a:47:
15:8b:10:29:a9:64:07:41:fc:09:85:5f:e6:f4:70:0a:46:75:
70:5b:3e:aa:70:c4:1c:02:8d:8f:90:8b:5a:78:8a:2f:cb:c1:
6a:d7:f4:fe:4f:cb:9b:e4:4e:f7:06:47:cb:87:c8:78:68:79:
59:9f:65:ea:ec:b6:b5:00:70:70:18:19:46:ab:a8:ff:54:b2:
d3:04:b4:b9:25:f2:0d:c5:b4:c5:88:5f:c2:70:7c:91:66:36:
47:56:0e:14:ad:e2:99:68:9f:15:a4:fd:2d:33:0f:6e:ca:7c:
35:c9:85:c5:06:fc:29:a4:b5:e9:e7:88:5e:7b:ac:50:f6:74:
cf:9e:64:99:e7:98:d7:1a:02:66:fc:5c:33:f3:89:26:55:f5:
33:3b:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:27 2025 by rpki-client