Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: Dvvh4ZSObRJDyUpDuu0rPeXlJOMS4KF6FkBRfNOXEYM=
Subject key identifier: 22:08:FC:2E:12:DA:AB:05:66:83:59:E5:21:96:91:15:57:31:F3:17
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 0197B632F3A41F2E7FE2FC911454E941BF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:21 +0000
Manifest this update: Sat 28 Jun 2025 11:01:21 +0000
Manifest next update: Sun 29 Jun 2025 11:01:21 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: Xho0RHrDTcGHCloijsJ4CpEjlmzw3/5MmJ94aadQ8sk=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f3:a4:1f:2e:7f:e2:fc:91:14:54:e9:41:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jun 28 11:01:21 2025 GMT
Not After : Jun 29 11:01:21 2025 GMT
Subject: CN=2208fc2e12daab05668359e5219691155731f317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:43:53:47:7b:cf:64:45:9f:4f:4d:ba:62:
32:27:31:a3:89:46:4e:dd:8a:30:58:fc:14:4b:2b:
c0:73:db:e2:3e:3a:99:06:19:b5:47:88:73:e6:ec:
1e:46:18:de:69:e1:ac:d9:21:49:14:d6:38:97:a2:
08:94:40:ea:4f:20:9a:6d:87:ad:6c:50:70:ba:54:
b7:e6:23:88:da:cc:4f:d9:e3:02:1b:1a:51:dd:5e:
be:5d:e4:cd:aa:72:1e:6a:67:1e:48:8e:49:c8:95:
20:a7:9d:9e:fd:a5:07:e9:4a:f8:56:30:c9:d7:06:
5d:ab:cb:89:f8:c5:54:b5:30:a6:41:3a:7a:65:d4:
43:f2:85:dc:fb:a0:b1:4a:2c:0a:b4:76:f0:e4:40:
75:1b:b7:e0:1c:5e:11:03:4f:67:7d:8a:99:bb:ba:
57:9f:f5:b6:65:65:60:6b:de:14:1f:b5:5b:22:e6:
e7:97:02:a2:a4:40:f8:e1:86:04:a3:a3:e9:56:39:
77:af:ab:ab:0d:d8:7e:b7:87:2d:ff:f4:b6:ad:2f:
9f:34:ff:93:6b:16:d5:ed:a8:20:41:57:20:9d:7d:
23:ec:f5:7a:16:41:a2:4d:c0:ae:40:a8:9b:c9:83:
80:be:72:b6:b4:cf:1e:ca:24:da:41:64:d9:c4:7f:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:08:FC:2E:12:DA:AB:05:66:83:59:E5:21:96:91:15:57:31:F3:17
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f2:5c:7c:82:62:62:88:81:bb:2f:78:88:61:1d:f3:00:2e:
aa:71:0c:d6:12:cd:0d:35:7a:f8:c5:33:e5:65:03:2e:8d:74:
f1:00:c2:36:ff:e4:76:0f:c7:54:ac:4b:de:a8:91:64:7a:1a:
f2:e4:37:b9:a5:a5:16:6d:cf:38:5d:d3:0d:ca:a5:8a:46:64:
66:6a:b1:3e:32:ce:ad:ef:91:5e:53:ea:c2:14:e3:30:f8:7a:
49:55:89:7d:83:75:34:40:89:9e:e0:ee:04:03:19:83:aa:fa:
4a:4b:5b:6b:1c:83:9d:14:1c:60:49:c9:98:78:22:3e:36:bd:
2f:a0:a4:7c:8c:a2:4b:a2:1e:87:40:d9:c2:4b:d6:ec:08:95:
12:23:57:dc:61:1a:6c:4e:eb:7f:66:f2:e5:95:a7:12:15:a0:
66:a1:fb:36:05:77:87:c2:1f:d3:5c:08:86:53:70:6f:93:98:
42:ff:c3:0c:21:c4:c2:8d:df:cc:38:f5:52:8c:1f:f0:8a:e0:
32:77:40:38:5b:3a:ec:03:4c:bd:89:e2:0a:a0:9e:93:10:45:
ad:05:df:56:85:2b:82:0e:72:d8:07:b9:ad:b8:90:e3:9f:4b:
c7:f5:22:74:67:23:9e:87:ad:70:3b:69:b5:00:2a:43:0d:07:
0b:63:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:21 2025 by rpki-client