Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: vflUg99d3m7ct+V6Q0ycpmo4xVMWIVTV18Sj3UZbmrc=
Subject key identifier: 5F:2E:30:1B:47:D8:09:68:E7:03:D1:C3:E2:0A:42:E4:1E:25:C0:7F
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 0197B6D7AB3FED690091C11FD95A27D51CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0E71
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: AH2Kk8u9HSKW3ijqNtnIHfAUacaYyY50UG6wvisqogw=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ab:3f:ed:69:00:91:c1:1f:d9:5a:27:d5:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=5f2e301b47d80968e703d1c3e20a42e41e25c07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:35:30:52:1d:7c:97:ce:f7:33:a3:00:65:
89:38:7a:1e:2a:91:53:7d:29:8e:ca:91:36:7a:5c:
11:82:9e:46:90:90:0b:20:08:2d:1e:5b:e1:5c:d9:
86:53:8f:51:2b:16:94:04:11:fc:b5:ac:65:39:48:
80:d9:dc:e0:ef:3d:e5:76:ec:22:22:86:98:84:7d:
33:ac:e1:c1:83:1b:3f:99:4f:15:2f:86:7a:2f:ba:
48:f0:10:76:5c:77:bc:c9:31:85:e2:5f:31:90:85:
94:c3:17:6a:5a:71:59:43:e8:8d:19:6c:1c:56:40:
dd:25:aa:f6:6a:04:3e:2c:bc:e6:4f:4f:28:46:76:
c3:05:27:5c:bf:9f:2f:fd:c2:cd:db:30:d3:5d:cf:
53:1d:43:52:32:3d:f6:d5:13:19:a6:cd:ea:22:82:
a3:eb:ab:da:db:04:97:45:72:10:de:51:a3:25:83:
41:b5:ce:6c:df:a6:17:50:08:52:22:9f:7b:47:cc:
ce:1f:df:2e:c3:67:e2:1a:af:6f:b1:d8:bd:83:31:
e8:dd:e4:4e:18:00:6e:7d:29:3a:76:13:47:36:33:
da:81:1e:29:09:e3:03:6d:3c:c8:7c:b7:9e:f8:6f:
83:02:fb:95:91:1d:fd:14:dd:a3:95:ec:dd:9c:8f:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:30:1B:47:D8:09:68:E7:03:D1:C3:E2:0A:42:E4:1E:25:C0:7F
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:59:8f:87:7c:1f:8f:28:b3:b8:50:d4:63:dd:5c:97:fb:d7:
ad:92:15:44:15:e6:cc:18:1b:65:21:ea:95:f5:3f:3d:e4:6d:
3a:81:de:81:b7:77:a3:cb:6f:dc:10:ea:57:f5:c8:96:69:1d:
20:35:1b:7b:c2:aa:bf:d2:cf:f1:eb:8a:c1:49:35:0f:b0:da:
47:ab:57:8d:9c:59:e8:d9:a6:13:00:db:ae:97:77:cd:41:dd:
60:aa:38:83:ad:d9:55:66:64:df:1b:81:fe:7d:5a:20:8f:dd:
c8:6f:e8:f9:a8:9d:20:77:a2:ba:98:e4:5f:1d:f2:71:d2:69:
87:11:fa:ae:b1:58:c2:e6:94:e9:e0:18:2a:9b:13:3c:5a:98:
5f:97:f8:09:51:15:47:56:fc:11:11:a3:d9:ef:2a:30:59:36:
15:74:3c:b3:72:40:63:4a:6a:88:0b:f4:82:40:5c:19:d3:c4:
23:40:ce:e4:a1:2f:21:f7:9a:23:9f:d9:2c:f1:11:6d:81:eb:
07:73:ab:4b:61:54:98:ca:e3:28:f4:b4:83:15:d9:a5:5b:c1:
3c:7c:db:2e:64:ad:9c:ef:0b:c5:23:80:49:7c:ec:65:15:c0:
34:c0:bf:a0:8a:38:0b:1f:a7:ee:31:b2:80:ab:bc:fa:12:54:
f9:6b:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:54 2025 by rpki-client