Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: QSbxTrxO3wpXRcmaHV5mJjXFngksNSmdeSID2RkVDno=
Subject key identifier: F7:7E:04:1F:DB:CA:60:53:AA:95:8F:08:24:D3:01:6B:51:1C:39:A8
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 0198D54EB4B9E743E63E0C1BED509A63E783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 12EE
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: k+/Ust+aSXR5rYOmODAxpUz6mDv4CeZEAv8ziQ0RA7Q=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b4:b9:e7:43:e6:3e:0c:1b:ed:50:9a:63:e7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=f77e041fdbca6053aa958f0824d3016b511c39a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:73:dc:ad:29:21:35:4e:0a:a9:b6:8d:83:
ae:d6:c0:86:4e:94:61:81:bc:94:4e:90:ce:78:2c:
9a:52:45:72:7f:94:16:b6:5d:7a:fa:4f:c9:00:c1:
7e:af:56:a4:d6:8e:67:26:66:40:2a:56:3a:fb:cc:
1d:45:6a:e9:fe:db:a5:9f:8b:66:83:60:0e:b5:2d:
8f:32:e5:47:d6:f6:8f:e5:be:4b:ff:46:e6:ef:63:
8f:6d:96:13:a2:f9:a1:8a:3f:99:f7:70:3a:10:07:
83:c0:63:da:86:10:e4:76:ee:74:f7:8a:ef:24:86:
05:fb:72:88:1d:cb:19:bf:21:19:c8:7b:25:d8:73:
54:49:39:16:82:9d:79:83:49:bb:dc:02:35:a5:c3:
a3:b6:84:89:9a:18:0a:2c:fb:93:b4:e2:92:3a:b1:
90:15:1f:b0:d7:28:ea:76:0b:a8:b2:93:28:2d:44:
8e:f5:cd:02:c9:e6:7e:c7:d4:f4:5c:27:b6:28:f1:
da:e6:23:bd:17:b2:fb:76:0c:e1:7d:46:fb:ce:b1:
cc:5f:92:9a:ff:db:0c:21:7c:8c:ed:c8:ed:f2:40:
92:53:fd:4a:9c:af:4f:78:6c:59:b2:11:61:9e:24:
84:bb:33:d6:23:ba:34:e6:82:70:15:6c:4e:0e:76:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7E:04:1F:DB:CA:60:53:AA:95:8F:08:24:D3:01:6B:51:1C:39:A8
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0d:12:a5:0f:29:0e:73:c1:4b:c9:43:f3:4f:3a:7f:5d:76:
e2:04:f6:cb:38:44:be:85:10:1a:5e:bd:fa:22:92:61:49:15:
5b:02:c6:ba:9d:2a:1a:6b:34:d4:b4:39:b9:b6:95:ca:02:d3:
50:b5:ed:86:46:c7:14:56:23:b2:22:d2:6d:da:5b:24:ce:3e:
05:ca:43:f6:4c:7d:67:0a:50:d6:c5:b0:e7:f1:cd:e6:a9:47:
c9:89:9d:d0:d5:7d:1d:ca:e9:05:f6:38:7a:3e:c6:01:ad:ef:
75:1c:33:e1:cd:a0:67:f7:b7:62:ed:70:75:e4:27:01:a2:a0:
58:11:56:aa:0c:d1:03:58:7b:a9:fd:e5:01:3f:12:5a:7e:71:
c6:e0:00:46:9c:94:d2:74:88:4a:fc:95:d9:e9:08:ef:3d:8b:
b4:b2:3b:ec:4c:63:3a:40:24:92:00:ee:1c:28:c0:b1:c1:fc:
42:c8:f4:23:e4:2b:92:36:55:ea:cc:04:12:e3:c2:ce:c3:a3:
a6:49:e2:c2:69:c5:36:07:c5:70:d0:e9:a1:2e:4c:59:df:c5:
76:62:80:b9:ec:8d:31:45:0a:29:43:6e:a8:99:26:f7:c3:29:
8b:93:dd:c1:6b:bf:48:b1:ac:51:0a:96:eb:7b:54:d9:8b:17:
2b:74:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:09 2025 by rpki-client