Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: A1vuBQ811UFRAbD6FXcyuh4EOwBgiRDVl2Bi/8hBx/c=
Subject key identifier: EE:3A:13:6D:7E:ED:CE:A3:D2:BB:DE:94:A0:F2:28:40:5B:D2:0D:21
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 0197B6A109F1D770DB7FBEBA9E2EA9ABECD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: HOb6cNBCsLZbLhspAPBfcaACyrBChzcaAfI4oIf/RnQ=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:09:f1:d7:70:db:7f:be:ba:9e:2e:a9:ab:ec:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=ee3a136d7eedcea3d2bbde94a0f228405bd20d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:c7:ca:b7:35:de:f5:b1:c9:73:37:5a:6c:
30:09:a5:66:84:ed:89:a1:6c:54:03:4d:d6:17:f8:
ac:a7:4a:84:3a:a0:b5:4d:7f:cf:38:92:41:73:c5:
12:d3:cd:4d:dc:8e:95:a1:27:18:62:45:7b:0d:6a:
49:c5:9f:1c:07:75:b2:c0:2c:60:a7:6e:11:50:16:
6c:37:98:e7:26:65:5d:14:8c:b9:02:b6:22:6b:dc:
9c:b5:06:9c:5e:03:3c:e3:33:7d:2e:57:a4:5a:52:
ac:24:0c:69:f7:04:6b:87:b8:0d:3b:86:da:9f:e2:
15:56:ad:a5:53:b2:ef:20:d9:70:10:fe:3f:4f:c5:
91:f8:de:9a:1e:a2:77:0f:e3:11:f2:88:87:e7:bc:
19:06:6b:0b:78:79:19:8f:63:ca:f6:24:41:b3:7f:
89:9d:9c:19:5e:96:47:ac:86:86:ff:10:49:a7:c4:
19:46:ec:b5:18:15:7d:ad:5b:e9:e5:a6:ab:18:1e:
64:e0:04:b3:28:5a:c2:b2:3a:4a:c7:f4:67:62:89:
95:02:f2:03:e3:02:ec:4d:e5:76:a7:da:e2:4b:00:
90:01:ce:8f:39:e8:41:36:f7:02:8e:82:8b:5f:5e:
15:2f:4b:9d:85:6b:bf:e6:27:bf:e8:eb:dc:07:41:
ed:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:13:6D:7E:ED:CE:A3:D2:BB:DE:94:A0:F2:28:40:5B:D2:0D:21
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ba:3e:43:c8:78:13:05:9f:0a:90:ab:a0:3a:58:92:ef:a7:
d3:d7:82:df:66:44:10:f8:f6:1b:a3:83:35:53:f1:7c:28:f4:
3d:67:31:f4:de:47:f7:34:7e:de:bc:91:13:b6:a1:80:3d:bf:
73:86:72:95:71:91:fe:f4:79:d1:e0:96:ca:8e:68:63:66:0b:
f6:2f:21:50:e2:e9:e9:ec:70:0d:24:82:c5:65:97:6b:33:1b:
28:40:0d:8c:d8:48:54:6c:cf:09:2c:ed:f2:b9:24:9e:29:94:
ab:0e:f3:83:93:95:24:bf:41:51:87:f4:5b:90:20:70:48:72:
ca:1a:c5:23:a1:e3:be:2a:e8:d4:dc:95:88:85:44:6b:89:a2:
df:68:a1:67:76:49:0b:40:04:4d:7e:79:af:3c:2a:30:e6:6e:
66:35:98:61:43:f2:ff:e7:a6:a4:ec:d9:c6:18:12:97:0f:e7:
f0:ea:c6:f6:77:f2:2f:c6:a4:13:17:ab:cf:f6:76:e3:72:22:
db:39:ea:c8:44:1d:c8:d0:50:33:3a:0b:29:d0:39:3c:ef:36:
7e:00:ed:2b:65:9d:a3:63:b5:25:39:c4:77:11:45:de:5e:7f:
06:31:54:51:57:2f:ac:62:f9:ff:97:28:eb:22:a6:8d:d0:b3:
c3:a3:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:20 2025 by rpki-client