Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: YhcyIbpFYSkE00pl261TdlQKuFhF1z3/J4kJnJXkomg=
Subject key identifier: 20:D3:85:27:B1:5C:6F:75:75:05:1A:98:8D:29:1E:37:BF:8D:B9:BD
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0197B7B3481C657F1F2E834AD83E363C71A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0EF6
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: VJqRTn5uDOk/fdKb737JXwq+TyjX8hek4haOBTCVc48=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:48:1c:65:7f:1f:2e:83:4a:d8:3e:36:3c:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=20d38527b15c6f7575051a988d291e37bf8db9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:c4:02:be:1b:96:12:9a:86:99:e3:02:44:
19:ee:1c:d2:c5:fe:dd:00:22:ad:3a:63:1c:c1:61:
f9:56:06:50:9b:f2:03:a3:ae:32:db:68:47:7f:d4:
c7:0d:68:e3:4c:d3:42:d0:7d:c6:02:4b:ab:0e:fc:
d3:67:6b:e8:c3:89:60:e2:02:2e:5a:67:4c:88:d5:
33:3c:13:d6:e0:ec:3d:77:fc:a9:cc:4c:80:6d:73:
7f:45:31:57:56:b5:99:81:10:11:fe:6f:2b:ed:70:
69:ea:9a:92:d1:b0:5c:81:35:ef:ea:eb:c0:06:e2:
1a:2b:47:b8:07:5d:4a:2f:4e:2d:4b:79:f4:bc:a9:
0c:68:35:9e:85:43:f7:bd:6b:c9:e9:97:a4:9b:d2:
79:c7:74:d8:04:1b:39:cd:a4:1f:3a:9f:33:78:16:
e4:d6:5f:f0:d6:2a:a6:8b:da:e5:98:ff:e2:53:8e:
11:c7:09:c6:bf:f1:ea:43:32:75:0a:8c:e6:72:58:
2d:63:0f:93:95:44:71:4d:ca:62:f0:10:a8:d7:6f:
4c:6d:89:c0:00:92:29:55:b6:6a:5f:fd:5d:11:b9:
e8:e8:ad:f6:10:c8:0c:5d:c9:8e:2f:a6:34:e4:5a:
df:c6:a5:c9:18:49:3c:6a:45:ed:61:51:94:88:e1:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:85:27:B1:5C:6F:75:75:05:1A:98:8D:29:1E:37:BF:8D:B9:BD
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c3:26:6e:c4:6b:16:41:52:b7:c4:e9:01:68:29:0d:d0:e5:
96:7e:3d:55:06:4e:2d:6a:16:9a:94:a4:38:77:79:c9:48:26:
13:e6:e0:50:87:70:d9:e6:f2:53:71:86:d1:15:ea:6a:b0:54:
ef:cf:03:f3:a6:6f:31:f4:33:95:0d:36:56:8f:14:fa:82:67:
50:c7:b0:f7:52:1e:60:8d:0c:6d:16:a6:90:cf:2c:ac:fc:d4:
e4:b2:d8:81:c6:42:46:07:be:06:58:49:90:c9:2b:2c:9a:02:
b8:c6:54:06:84:02:77:41:6b:91:6f:08:46:3a:c4:c5:43:fc:
de:75:f2:30:10:65:83:4b:a5:fb:73:27:28:3c:17:c0:6d:dc:
4f:cb:6c:e8:e8:3e:e0:d1:96:a3:7a:22:e7:05:df:a1:ec:5b:
ca:e8:63:14:36:ed:96:d7:f1:dc:f8:0e:71:e9:4d:94:f5:a1:
80:ad:66:79:b9:c0:cd:b8:d2:bd:33:f1:11:02:85:66:b1:a2:
23:14:50:b9:95:25:0a:c6:64:dc:b6:39:1e:b8:53:7a:cc:0d:
38:71:e4:28:d9:b7:0a:aa:11:f5:a8:86:cb:9f:65:83:a8:25:
28:b4:d5:18:90:df:fd:14:cd:8c:66:85:ae:62:76:6d:d6:39:
ac:48:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:26 2025 by rpki-client