Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: h4mT4YfBSe4F0sbRbr/0+rlAhA15F9071NtPAsaZZkw=
Subject key identifier: 42:80:23:5C:B4:4F:1E:7A:28:9F:9F:1F:62:B4:F8:54:FB:AA:54:66
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 0197BB598634C5ABFBC7256D6E1631420946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 15BF
Signing time: Sun 29 Jun 2025 11:01:35 +0000
Manifest this update: Sun 29 Jun 2025 11:01:35 +0000
Manifest next update: Mon 30 Jun 2025 11:01:35 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: 5JGPvMUPlATmbBVg4zCbv+NHehNFvnQoKSfk68a1uEQ=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:86:34:c5:ab:fb:c7:25:6d:6e:16:31:42:09:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jun 29 11:01:35 2025 GMT
Not After : Jun 30 11:01:35 2025 GMT
Subject: CN=4280235cb44f1e7a289f9f1f62b4f854fbaa5466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:b6:a3:b7:b2:35:0c:f5:e2:04:86:05:7d:
08:e1:40:b6:c0:39:19:56:94:30:fa:d8:a1:22:31:
63:2d:23:7a:17:28:cf:e5:23:9c:f4:b9:df:79:c0:
4a:4c:d8:37:f9:c4:6b:c7:b2:c6:6e:84:7f:9e:7d:
b7:f3:3e:e2:80:e9:97:44:43:77:78:52:49:74:8e:
6d:1b:70:e9:5f:c9:04:f1:3d:3a:f0:24:7b:be:91:
0c:c6:b1:23:83:79:eb:32:9d:8d:6e:24:3d:2b:84:
06:07:2f:da:18:5a:39:c4:d3:00:35:e4:b2:43:9e:
e5:43:d8:e4:9f:b3:9c:6c:14:27:3f:51:7a:6d:63:
0d:3b:f4:a1:89:8f:d8:ae:1d:20:45:91:91:f4:23:
65:a8:d1:0b:80:1f:2b:b7:04:1f:64:18:e1:50:be:
a0:9c:b8:36:1e:34:f6:10:d0:ad:13:4d:61:46:9e:
9f:2c:12:0c:ba:af:8e:3c:5f:da:9f:a5:d2:f7:43:
f6:33:b0:7e:82:65:23:8b:f3:05:2b:9f:07:1e:07:
09:af:52:f6:25:ec:61:ce:37:f0:fc:ed:ca:47:41:
be:02:55:42:ac:71:3f:81:a6:e7:17:f5:06:ef:fa:
34:69:cb:99:82:b1:0b:2e:a8:b7:6b:bf:f5:76:54:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:23:5C:B4:4F:1E:7A:28:9F:9F:1F:62:B4:F8:54:FB:AA:54:66
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:ab:1e:41:d0:88:47:14:0e:14:5e:20:a0:ef:14:fc:88:
0b:3a:ee:07:1c:c1:1d:82:f0:b8:05:98:66:9f:f9:04:bd:e8:
13:33:95:15:80:ea:cd:8e:0b:71:7a:c1:bb:16:bd:b6:df:d6:
69:0e:62:c1:36:7a:ac:01:82:9d:bf:d9:78:09:8a:4a:40:43:
72:ea:22:89:fa:b0:95:43:bf:c5:ff:9e:d4:ed:be:99:4f:fd:
0e:f6:3f:b7:3d:27:9d:4e:a1:fe:44:5d:b9:29:50:18:18:9b:
c9:35:3d:7f:13:fe:f5:78:86:99:3a:1c:cc:ea:5d:f6:0d:f9:
b4:09:c9:a4:61:41:24:b2:07:6c:94:2e:3d:4f:b2:3c:53:0e:
24:20:d8:20:22:d7:09:dd:0c:32:3d:46:40:5f:b9:64:95:ee:
91:f0:a9:b3:5e:d7:18:a7:af:e7:33:19:e1:a3:c0:10:e4:3e:
d7:a4:3b:55:49:38:5d:69:55:01:fd:0a:a2:8a:a8:86:11:d9:
77:09:f7:2c:07:5a:90:e6:b6:60:36:d8:68:92:ff:6b:15:04:
97:48:27:ba:20:f4:10:4f:b0:65:71:e0:08:2e:35:d8:a9:3d:
22:6c:e1:05:57:d7:9c:c6:fa:3e:78:12:51:1b:d5:42:79:fa:
83:72:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:08 2025 by rpki-client