Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: YZHl5POKJN/rtVbXx8ahOtMy66HQUmEIXmhmT1IM4To=
Subject key identifier: 1B:72:55:EE:7C:AF:A1:F5:E0:88:31:75:4E:A1:72:68:3E:55:A4:58
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 0197B96AC48284BC4FDBF1D8881B7238AE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 125B
Signing time: Sun 29 Jun 2025 02:01:11 +0000
Manifest this update: Sun 29 Jun 2025 02:01:11 +0000
Manifest next update: Mon 30 Jun 2025 02:01:11 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: KLe4u/bUYiEgdAgg7DV2xH7ErVlB+oQMq5hT1gLtqRM=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c4:82:84:bc:4f:db:f1:d8:88:1b:72:38:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Jun 29 02:01:11 2025 GMT
Not After : Jun 30 02:01:11 2025 GMT
Subject: CN=1b7255ee7cafa1f5e08831754ea172683e55a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:25:a0:73:31:6d:58:48:12:ee:59:dc:ce:
a7:b4:f2:96:db:88:06:0e:f7:ed:1d:dd:ed:b4:df:
5c:4d:1d:7b:89:13:e3:29:6d:d3:bf:eb:7a:7d:3d:
64:86:75:ea:5b:ab:aa:7a:6b:cb:27:b0:23:db:79:
7f:55:4e:cb:6d:b6:8f:be:8d:9c:58:09:78:38:dc:
a2:a1:1b:ff:ff:47:69:26:ed:29:41:94:7f:9a:47:
56:07:69:c5:de:c0:b7:ad:e7:52:e7:5f:36:20:3c:
0c:d4:a6:10:d7:eb:06:17:b5:21:09:38:b9:c2:3b:
85:83:b6:56:72:61:08:96:6d:1b:53:a4:b2:d2:02:
63:67:a0:9b:ab:9d:89:20:34:0f:6b:36:ae:f8:76:
83:f0:01:31:42:d3:20:ff:e0:4e:78:fe:5d:ba:35:
4c:2d:aa:c6:a5:c0:f9:9c:86:df:6c:c6:72:a7:09:
cd:2c:21:02:39:d4:cb:bd:e1:fa:e7:d2:70:49:b8:
51:1f:4f:13:35:7f:c5:7f:e9:76:e9:13:d5:5c:bd:
fc:5b:01:60:5e:78:bc:b9:62:c2:cf:3a:ab:e7:20:
ea:c0:5f:f0:7e:23:b6:50:b2:23:66:99:54:34:d5:
b6:03:21:22:81:fe:8d:53:67:0d:af:36:46:60:9e:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:72:55:EE:7C:AF:A1:F5:E0:88:31:75:4E:A1:72:68:3E:55:A4:58
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4b:c3:38:d3:9a:1d:90:c7:2a:34:73:c4:36:46:4c:d3:2e:
9d:46:66:cc:a6:77:31:d1:9b:94:e6:a6:97:62:e5:2d:e5:c9:
16:db:44:ed:1c:dd:38:56:10:a0:c8:cc:1b:9f:ec:da:ea:6d:
33:75:64:6e:ff:3f:36:e7:dc:08:3d:95:4f:66:45:32:c8:1a:
b7:2e:76:30:29:f8:6c:2c:f3:0c:d5:79:12:89:15:4e:f4:45:
c4:dc:e0:28:b3:2e:0d:07:ad:fa:74:91:ad:b2:5a:7e:46:d1:
33:2b:56:03:d4:ca:f9:c4:31:1a:2b:7a:f2:ba:03:87:fc:97:
31:09:dd:1c:3f:ca:41:51:0b:e5:d9:f7:58:54:50:8b:50:44:
41:c7:a2:89:cb:c1:89:4d:79:36:1f:ce:7f:64:18:33:64:e1:
68:0a:1f:6e:c9:fa:a5:7f:44:39:be:54:d4:79:23:c7:dc:6c:
ca:45:10:20:e9:53:5d:ff:4e:a9:97:e4:cb:1e:dc:84:7b:b6:
31:fa:ff:c8:ab:2a:68:69:b4:77:2a:7a:47:6a:59:78:c3:ce:
95:0e:3d:77:43:d8:96:23:5a:1a:a8:86:72:20:f0:e0:95:97:
6a:5f:5f:63:0e:ba:40:e8:02:d3:e0:70:13:d7:06:3c:5b:f8:
62:38:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:36 2025 by rpki-client