Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier: RB+QVIFi99OrI/p08irERlnJkZe7EAH4Rx7Dc8jkKag=
Subject key identifier: 07:B5:17:C8:78:1F:F6:C4:7C:4F:C1:3F:27:E1:E4:8D:34:81:21:2B
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 0197B70E9D78EFD2A4780F131623D2FEF4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: iiaeviwg1px10SyjLZMloIILjofMvjPVmo9FLRgHuHc=)
2: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (hash: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9d:78:ef:d2:a4:78:0f:13:16:23:d2:fe:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=07b517c8781ff6c47c4fc13f27e1e48d3481212b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:0e:9e:1f:30:03:80:54:aa:97:64:54:c9:
6c:62:6a:5d:7a:57:57:ed:2a:4a:64:8c:bb:ab:69:
e2:8b:b9:05:14:8e:8a:cf:03:9d:5e:4b:32:c3:59:
8d:3e:67:5b:cf:f8:83:ec:68:28:c1:87:fa:ee:ec:
bb:f6:4d:2e:2f:4d:b9:a6:cc:6c:97:24:86:d0:a4:
3e:ef:e5:d3:3b:fe:19:1b:4f:5c:a8:92:9f:1f:17:
ed:8e:69:9c:4a:0c:d1:f7:f6:72:01:04:4e:e3:a1:
a1:2b:cd:a1:2a:b8:97:24:ba:fb:cc:e3:09:af:64:
52:54:57:b2:34:65:d7:cb:92:32:f7:26:fb:9f:78:
2b:4c:8a:b6:b3:6e:66:b7:b5:7f:86:cf:cf:28:0b:
c7:4f:27:76:63:e5:3b:96:16:5f:b2:c6:7d:b1:fb:
fa:9d:2a:cf:a6:79:06:9e:c6:9c:aa:e2:ee:2b:7e:
e3:28:fa:57:c6:10:3d:27:f8:ee:d1:9a:0e:8f:fb:
6f:c7:82:7b:7e:41:b3:9c:06:18:8d:21:22:07:ff:
98:ee:a0:71:1b:58:e1:5d:84:e1:b6:5e:0f:94:00:
94:ef:a2:88:ff:69:f3:43:29:e4:da:81:1b:7f:e7:
ee:5d:ba:5b:64:35:26:63:e7:45:6c:1f:60:44:6d:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:17:C8:78:1F:F6:C4:7C:4F:C1:3F:27:E1:E4:8D:34:81:21:2B
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1b:cd:a6:83:b3:a7:82:fb:4b:43:e9:79:11:fe:b0:7f:80:
bf:27:50:ac:5b:b5:f7:71:1b:5a:e1:28:f9:ad:de:1e:19:8f:
b8:0c:35:2c:c4:49:b1:33:dd:b8:89:2a:66:df:bc:ac:5f:d3:
61:9a:97:cf:ce:93:fa:c7:45:40:aa:e8:d3:07:67:0a:eb:34:
bb:d4:09:25:de:eb:06:68:81:19:82:33:84:bd:af:ff:08:d0:
ba:e0:0a:60:b2:66:c6:72:73:f7:ab:02:13:59:a2:2d:13:d2:
c5:90:05:e4:bc:99:d7:34:d8:21:1b:19:bf:f4:f3:7f:28:83:
59:9a:17:1b:9c:aa:89:56:bc:00:bc:a7:c6:f6:00:43:f6:df:
8c:7a:1a:93:c5:cb:cc:60:d8:f0:a6:53:af:2e:e6:55:f8:6d:
ed:cd:2f:4e:17:57:08:8b:22:76:ef:54:02:13:64:77:9d:4c:
1d:44:55:e6:72:23:46:1b:f7:1c:58:33:28:66:c7:20:1d:b0:
bf:9c:23:5b:69:d9:d4:1a:0a:8f:32:cf:8c:1a:2b:c3:51:bd:
e1:40:57:33:4b:20:da:d4:6f:a6:b3:cb:42:8d:37:01:3c:25:
86:31:29:33:2d:9b:fa:a2:c4:be:d0:35:c7:90:de:9f:e9:97:
8e:f9:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:41 2025 by rpki-client