Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: m3NR/WU+6pYuWLKUj9koJkqUWK8bmQMtNQh12HSVxLM=
Subject key identifier: 3B:3A:45:68:82:69:34:F3:8A:81:1E:8F:6B:A6:19:C1:58:54:44:4D
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 0197B6A1F88E6C6DFD71F198A0682F640626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: H9cC4oN3gylPYTwG3Bqx2Mr0AGMIc9aschRT0nHlbT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f8:8e:6c:6d:fd:71:f1:98:a0:68:2f:64:06:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=3b3a4568826934f38a811e8f6ba619c15854444d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:e2:93:55:d5:f9:f8:0b:45:20:a5:e6:62:
34:28:fd:7d:42:1c:42:7a:b5:62:25:2d:31:aa:e9:
1a:f5:47:b5:3b:8c:db:a3:7f:dd:2a:e4:22:ae:b5:
a5:fc:6c:a0:cd:d0:7a:09:85:46:bf:41:b2:3d:89:
68:92:d8:87:e3:78:95:f9:f2:1f:f8:33:c1:c8:3d:
a6:b3:97:73:ce:53:b0:60:c1:2a:1f:b8:c8:e0:91:
9e:ed:e9:34:e4:fa:0c:71:86:1c:13:03:92:1e:08:
95:17:78:12:c4:a6:36:a5:2c:8a:a4:26:f0:9e:0b:
1f:3f:22:bc:51:84:49:ad:f4:6a:3c:30:b9:e3:6d:
5b:ae:2e:2b:a4:b6:d8:86:7e:19:82:45:a2:c9:0a:
e8:50:f0:95:86:f0:bf:6b:0b:27:3e:8f:2c:35:cb:
c8:61:e9:51:f4:4d:41:6e:21:43:11:9b:03:16:30:
57:6f:ba:ab:88:e4:de:7b:2d:16:c0:ac:8f:14:e7:
66:ff:5f:33:e6:92:3a:82:08:e1:a4:35:60:5c:f5:
0f:15:74:11:0d:40:c3:c2:3f:8b:d4:d1:2b:6e:1f:
89:92:7e:e0:a8:63:c6:79:38:be:02:27:ac:06:6a:
b2:cd:ba:7c:c9:69:3b:a1:64:23:1c:b4:14:b2:d8:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:45:68:82:69:34:F3:8A:81:1E:8F:6B:A6:19:C1:58:54:44:4D
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:89:00:40:f9:a1:36:42:53:19:6d:3c:4a:6e:26:72:ef:43:
d5:96:54:cb:e4:c8:81:02:6e:74:71:c1:09:c6:89:86:64:a5:
c9:a0:62:77:74:ed:ca:90:48:02:d6:67:0d:48:8d:0c:5e:08:
f5:f7:d5:59:c3:eb:40:3f:53:1c:2f:f2:01:68:aa:fc:f3:21:
e9:9b:ec:6f:4c:39:d8:7a:32:ca:7f:e9:e7:92:06:58:c0:44:
a7:80:d7:8a:ae:63:16:77:1e:d4:f3:3c:00:30:28:e5:47:fb:
7c:06:8e:8c:70:55:f8:f2:29:ab:ea:29:39:30:80:73:2d:3a:
bf:bd:10:c7:e9:7c:78:f8:39:e2:a1:96:69:47:ff:1c:a2:8a:
ee:4d:cf:b2:4e:e3:ae:ce:10:3a:ad:e5:be:09:74:6c:49:af:
9a:e0:b5:d2:16:77:2c:30:03:87:af:03:bf:de:a7:1e:39:33:
c7:83:79:8a:96:7e:50:13:10:23:08:8c:7d:a3:18:c8:c0:94:
50:e7:9d:a6:16:1e:6c:97:bc:3a:f7:91:db:94:f1:45:c3:f2:
a0:38:8a:66:59:42:50:a2:cf:c6:1f:97:34:c7:14:ca:a6:00:
d0:fb:d9:9f:6c:f8:f5:3c:22:b0:a4:b8:11:de:98:cb:82:b6:
86:9b:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:48 2025 by rpki-client