Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: on2J+1nJmJ9yLRo+2/2cD84cizMtrMv/NHfaNUdgO60=
Subject key identifier: 3E:7A:51:C7:61:BA:A2:E3:6A:E8:67:8F:07:63:B7:B5:BB:60:92:90
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 0197B5FC7EA8B774E8FBCB86EB9E2FCF8ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 13D8
Signing time: Sat 28 Jun 2025 10:01:52 +0000
Manifest this update: Sat 28 Jun 2025 10:01:52 +0000
Manifest next update: Sun 29 Jun 2025 10:01:52 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: tJl5/5G5s02jXZe0gxRgcj/UeZIs/+Wegb1Na4KOcmw=)
2: WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa (hash: eYdzJRuLYCeHIGBMM52itYWmfWw58ujov0m3EgFoPMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:7e:a8:b7:74:e8:fb:cb:86:eb:9e:2f:cf:8a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Jun 28 10:01:52 2025 GMT
Not After : Jun 29 10:01:52 2025 GMT
Subject: CN=3e7a51c761baa2e36ae8678f0763b7b5bb609290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:d2:1c:46:ae:11:0a:5c:4e:dd:72:66:0c:
c3:95:e3:f1:5d:cd:74:9a:e3:28:12:d5:e4:53:16:
39:17:53:79:00:7c:bb:ac:be:48:e2:7f:f7:d8:5d:
5a:52:85:57:f5:2b:11:9b:cd:78:e4:23:21:7c:1c:
dc:cd:b0:45:35:35:43:89:8c:1c:7b:88:3b:af:54:
09:30:53:ad:88:aa:e4:d8:37:65:16:0a:45:0f:9f:
d7:5f:11:41:c5:24:eb:73:34:11:a2:7e:f7:55:ff:
51:23:31:b1:c0:8c:d5:0d:ff:52:fa:bc:1a:9e:dd:
12:30:6e:3b:79:8a:20:8d:34:6a:c0:03:f2:dd:fb:
d9:cd:70:7e:a8:bb:86:88:55:71:40:95:f4:f6:cb:
0d:cf:36:7a:0b:a9:0f:15:11:f4:db:95:56:e7:80:
01:e7:82:7b:5d:65:b3:c5:00:8e:33:ca:88:1c:8e:
a7:fc:cd:c2:6d:a8:b6:22:64:b9:fe:eb:79:db:4d:
91:38:61:d0:94:1a:38:22:9e:28:c8:9f:00:4e:ce:
55:af:d9:1d:6c:e8:c0:5e:9a:f7:3f:9f:73:75:1c:
5c:f5:a5:4d:71:8a:48:f8:79:cf:9b:ad:1d:17:8b:
d9:39:ee:24:46:0c:78:09:bd:11:8d:df:79:5c:4b:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7A:51:C7:61:BA:A2:E3:6A:E8:67:8F:07:63:B7:B5:BB:60:92:90
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3e:cd:14:1f:b4:7c:34:b9:58:c7:aa:51:44:08:1f:e5:84:
88:1d:e8:20:d3:5e:4c:65:1c:2a:7f:5e:57:b5:9e:bf:23:ef:
da:42:51:2f:9d:c8:da:c9:ef:b4:26:90:fa:45:53:e4:09:91:
49:fd:b4:8b:29:38:16:ca:9e:d6:06:42:85:34:b3:d9:16:30:
ff:48:87:9f:8c:5b:3d:63:e5:21:18:60:da:0c:d8:94:5c:32:
15:6b:96:20:11:cd:31:d5:3e:58:5b:bc:39:76:08:72:47:2d:
7d:20:62:e9:13:e3:46:b8:c2:08:2a:ae:31:4c:ba:06:94:d2:
6a:b0:61:2b:66:98:52:50:85:33:a8:4d:e7:67:64:75:46:17:
58:76:9f:31:3a:b3:c0:fe:c4:cf:4e:8a:36:21:9d:0e:07:cc:
92:27:f0:6a:e5:59:a4:1a:89:e9:dc:af:a3:02:38:5d:16:96:
be:45:88:d7:19:04:7d:86:13:a1:51:00:7d:b7:42:5e:9f:93:
bf:68:f3:37:5e:c8:24:ee:9a:74:33:8d:96:f2:ab:2c:db:19:
89:29:04:b0:05:7f:be:58:b0:ae:89:5b:2c:a8:aa:85:a9:60:
ba:2e:5d:23:c0:07:3f:48:00:f4:98:9c:50:1d:7e:01:7d:90:
4d:7e:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:16 2025 by rpki-client