Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: qC4OVjVIgWrHm7frm/XIQhi5Bcw3DJWk1NmF5tuvNCM=
Subject key identifier: 1C:F5:6E:25:B0:47:10:9A:D9:98:CB:35:89:28:B6:0B:FC:F8:4D:CC
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 0197CCBB23446A9F14202E7CBBCBDE76C175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 0F1E
Signing time: Wed 02 Jul 2025 20:01:45 +0000
Manifest this update: Wed 02 Jul 2025 20:01:45 +0000
Manifest next update: Thu 03 Jul 2025 20:01:45 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: kUK80Z/jabZP9+6rmHsBZegVP87hWDuuuNBBNWMwgwY=)
2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:bb:23:44:6a:9f:14:20:2e:7c:bb:cb:de:76:c1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jul 2 20:01:45 2025 GMT
Not After : Jul 3 20:01:45 2025 GMT
Subject: CN=1cf56e25b047109ad998cb358928b60bfcf84dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:33:79:c9:2f:05:4b:32:29:1b:1f:00:40:
80:27:a0:74:9b:6f:49:1c:3e:7e:6f:70:a7:f2:21:
35:a8:8a:70:72:29:d5:ff:4d:7c:7a:38:9c:3e:e0:
74:b3:50:78:48:81:d9:e5:ef:c4:d4:15:79:af:95:
86:6d:57:a8:29:87:0e:94:d2:00:62:5b:65:1d:46:
9c:85:42:af:b2:c8:29:c4:51:bd:80:c3:d1:91:5c:
17:13:92:bc:f6:a6:e8:7d:d3:1e:6f:ed:f0:99:bd:
ef:71:87:fe:7d:11:3e:8c:ed:17:f5:b9:d5:01:c9:
2f:9c:e3:7c:a4:b8:0b:76:e5:1d:70:a5:d4:57:c9:
cd:d6:a1:57:36:c9:2e:98:47:f3:08:91:e0:c1:53:
6f:dd:69:e1:8c:33:00:3a:bb:d3:e4:b3:97:ab:85:
b1:03:03:fc:19:cf:d5:4f:ea:d6:71:1e:a8:d5:e5:
77:90:24:eb:04:ef:5a:f4:06:9a:a0:97:cd:77:de:
33:c5:41:59:97:e7:b9:bc:71:32:7b:50:b4:c5:07:
62:bd:47:11:71:9c:39:a1:0c:3a:f3:c7:ac:d2:a9:
dd:bd:6b:84:70:50:b8:7b:df:1a:f3:a6:41:33:ff:
31:8f:ac:d8:f5:15:29:88:4d:5d:74:00:6d:31:c0:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:6E:25:B0:47:10:9A:D9:98:CB:35:89:28:B6:0B:FC:F8:4D:CC
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c3:51:30:62:95:b0:50:09:91:a7:63:d2:4a:0c:8c:02:2b:
70:f0:62:f7:7c:c2:0d:7e:41:00:a1:95:4c:d3:35:86:6d:e6:
09:22:20:32:da:d4:8b:4f:21:9e:20:6b:27:d0:79:6c:ba:43:
5e:27:85:9e:94:51:ae:56:fb:a8:7d:cb:0f:bb:9f:35:74:53:
49:84:61:d7:0e:30:37:eb:db:96:da:05:a5:13:61:ee:cb:a5:
9c:40:d6:c7:85:9d:64:b8:e0:b2:52:99:4a:fd:db:a6:cd:db:
58:52:cd:ce:7d:1d:19:90:5e:65:88:9b:99:f0:9e:4d:9c:04:
39:80:32:12:56:53:76:f1:bd:4d:ee:c4:76:79:76:ce:aa:d3:
b1:b9:6a:59:c7:3a:e1:6f:5a:bc:ac:a4:85:17:a9:92:4e:88:
8b:a8:57:15:ca:32:52:7b:bf:73:1d:7a:23:3c:53:cf:e2:3e:
46:24:71:44:78:fd:7d:af:5c:96:69:55:e9:5c:06:0b:c0:8e:
fa:ec:20:ac:3d:68:4c:ba:65:26:aa:66:08:2f:9a:16:87:21:
ec:81:83:46:b9:bf:32:08:93:e4:1e:34:c1:6d:fb:e5:fa:0d:
25:48:23:d9:05:93:c9:52:2a:9b:1e:43:57:d4:b6:a6:40:6f:
ed:86:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:27:58 2025 by rpki-client