Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: dFttgbHLT1A3eP6VRjBjTBBnPbfwzkx3BPJdUcsZqxI=
Subject key identifier: 85:43:89:CA:A1:07:5E:69:C6:8F:06:9A:25:17:31:5E:26:E9:33:05
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 0197C61512C13E025C4ECA82A2F6E0A3F515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 13:02:39 +0000
Manifest this update: Tue 01 Jul 2025 13:02:39 +0000
Manifest next update: Wed 02 Jul 2025 13:02:39 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: c1BbWzKIdlksL88XHaVYg2hAyLkZDfar2fXP3LqwlaE=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:12:c1:3e:02:5c:4e:ca:82:a2:f6:e0:a3:f5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jul 1 13:02:39 2025 GMT
Not After : Jul 2 13:02:39 2025 GMT
Subject: CN=854389caa1075e69c68f069a2517315e26e93305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:86:d5:cf:34:b3:9c:0f:88:b8:78:24:9b:
fb:f6:f8:98:2d:32:e6:c3:4a:73:19:b8:18:c0:44:
73:41:06:d8:78:db:37:bb:e5:52:05:ae:9b:1e:65:
ba:35:93:74:db:93:0c:e5:15:22:d2:64:bf:d8:f9:
13:5c:c3:11:57:a6:2c:f7:37:fc:df:a1:80:ac:cd:
22:50:a0:c2:02:f8:9f:8a:19:2b:42:65:65:e6:cf:
05:5a:f3:33:4e:69:9d:6f:05:b2:87:00:3a:46:b6:
f0:bb:29:d3:05:70:65:ed:0d:ce:f0:35:3a:81:22:
66:24:54:0b:89:23:85:a4:0b:f8:11:e0:83:12:e1:
93:3d:2b:68:83:7b:3d:fc:1a:68:d1:35:d8:bf:7f:
39:81:5d:1e:4b:45:28:65:ba:d1:21:29:82:fe:d2:
61:26:2a:55:d5:28:7e:12:fe:5f:6e:45:b3:f4:12:
db:13:9d:12:c7:a5:de:75:d7:82:00:9d:64:14:11:
c5:e0:d6:3e:89:58:dd:a5:cd:12:50:4d:12:90:ce:
69:a2:39:1c:f0:71:ea:d0:a2:65:a7:0d:52:b0:5d:
37:d4:4b:92:ce:df:51:dc:85:dd:08:25:fa:5d:0e:
0c:0b:56:04:29:d9:78:94:b5:94:31:80:5c:c6:14:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:43:89:CA:A1:07:5E:69:C6:8F:06:9A:25:17:31:5E:26:E9:33:05
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7d:23:12:9f:e2:53:b8:4c:f5:9b:f7:26:71:db:73:bb:a9:
02:19:64:b9:cc:a6:da:ad:27:67:2a:7f:6c:2e:8c:60:8f:b4:
64:2d:d0:e2:29:50:e1:14:3c:ff:5a:c8:2f:50:3b:86:4e:95:
11:9c:98:9f:ac:6d:e1:3e:c4:30:bf:e0:1f:d6:04:af:79:d7:
76:01:d3:8d:98:49:c1:c4:a3:74:06:bc:0c:ab:49:61:43:6e:
fb:56:b8:5b:1a:af:c6:15:20:4a:65:c0:3a:ac:e4:e5:ff:1a:
e2:8a:dc:bd:b5:e4:f2:07:0a:19:f3:41:e1:a8:2a:f1:fb:b7:
1c:55:3c:1f:0d:66:d1:8d:48:56:bf:da:e8:ee:17:f1:48:d9:
94:b4:e9:85:e4:46:06:8f:32:46:06:4c:9e:38:71:69:8c:69:
97:6c:79:15:c1:c0:30:6d:cb:ff:0b:41:75:b8:44:be:80:05:
58:93:54:70:8b:2d:bc:d6:94:3f:36:4c:d3:71:9c:68:7d:14:
df:ec:06:86:e9:01:02:b5:17:33:61:bf:06:db:f8:f7:46:67:
44:a0:93:33:49:26:2e:ca:06:b7:3a:42:c2:e2:bb:fd:63:3f:
74:5e:48:b3:16:99:9c:f7:a8:bd:d8:8d:2f:d1:24:b9:5f:09:
90:9b:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:19:30 2025 by rpki-client