Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: qiltFBWYnh2FzFnlwSjNkh5qkvHXkC5F2Xjt7Slen5c=
Subject key identifier: 49:44:27:B3:06:10:FC:88:D2:C8:DB:C0:96:CB:80:96:3E:CC:98:E9
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0197B7457B94C558C6C7C2E4A980206B62B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: 8RFNEXl4+EQdaQ50Isy1CaVyDzPSMZ5aORdUNeJvf+E=)
2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7b:94:c5:58:c6:c7:c2:e4:a9:80:20:6b:62:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=494427b30610fc88d2c8dbc096cb80963ecc98e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:ba:ab:8a:4e:b7:6f:06:31:61:ef:23:4a:
a8:af:0a:34:56:7e:6a:ed:ed:51:fb:ab:62:60:fd:
0f:a6:c3:01:97:d2:ad:79:f3:9f:eb:c0:28:ac:8d:
3a:a0:db:b5:f5:e2:51:e3:35:f6:d6:cf:d3:9e:4e:
60:3c:19:f6:98:49:b0:d7:52:37:9b:e0:a1:fd:e2:
ea:c3:0f:da:1c:37:41:5e:0d:ab:d0:04:5d:9d:f7:
23:46:88:68:75:ea:61:cf:93:48:37:52:26:32:80:
f8:e1:4d:08:fb:6c:b5:af:b8:d2:3d:8a:05:b1:64:
5a:69:98:08:cb:45:55:30:a3:ea:fd:28:78:8d:5d:
a6:ae:a0:cd:02:05:27:7b:98:bf:f7:17:4e:db:00:
f7:7a:85:a4:00:05:bb:6a:2d:2f:22:6b:5f:d9:99:
7c:cc:8a:75:64:92:90:31:34:74:0e:cb:d2:81:d1:
b1:f6:5d:4b:49:3d:21:b4:94:53:62:8e:d8:84:56:
2a:39:67:65:53:d1:32:91:65:d5:97:80:c0:db:87:
68:5a:fc:d6:0e:80:31:4e:68:3f:f3:ef:40:0f:dc:
88:9c:78:20:6e:bd:71:1a:62:c2:6e:ad:4c:e9:27:
50:8d:68:33:53:69:ec:75:cf:64:5f:2d:4b:42:fe:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:27:B3:06:10:FC:88:D2:C8:DB:C0:96:CB:80:96:3E:CC:98:E9
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0e:56:36:87:6b:cf:20:96:ad:2d:e2:06:67:02:97:bc:0d:
be:63:64:29:73:52:e0:f4:cf:70:8c:b0:14:4f:25:ca:5b:ff:
6e:ce:63:9f:37:10:43:77:37:96:b6:31:69:68:00:e3:b8:df:
46:ae:55:ff:8b:b2:4e:0d:54:5e:8d:49:98:4d:4a:42:5a:6b:
c1:13:04:52:ee:d8:4d:a9:92:d1:b2:28:f5:42:26:df:21:36:
57:60:f8:48:7f:4b:47:a6:8d:e3:53:b4:18:1e:4e:51:c2:9f:
ed:0c:62:df:a1:5e:2f:cc:3b:2f:03:43:13:90:74:15:a9:85:
5e:3d:c5:2e:29:cf:13:86:37:26:e8:db:8a:a2:24:ea:80:52:
ce:90:94:22:48:68:38:08:58:1a:03:d2:0d:36:60:1c:6c:30:
91:92:25:f9:76:6c:09:f8:68:68:48:e4:73:43:60:e2:4f:62:
20:0c:36:cd:0e:39:6a:26:c5:80:ad:d7:10:ba:9b:55:d1:77:
46:62:a4:79:40:f2:54:85:17:89:6b:46:7f:03:2d:f8:ea:8c:
fb:2b:7c:00:3a:c2:8f:1f:60:19:c7:93:44:f6:c0:e8:22:83:
ed:30:93:25:01:0d:ac:88:ac:47:8b:fc:f9:00:c1:07:a6:ec:
80:fd:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:56 2025 by rpki-client