Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: 2Vn49cspMXni2fxQojHrrAmeZLb5kC8Q9g9OaBbuJrE=
Subject key identifier: 48:A6:4F:8F:03:64:A0:C8:2F:4A:5D:EA:04:93:FD:FC:1F:E6:D7:EB
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 0197B7B389AAAC4C839B55DC6ACED3CBD00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 18:01:26 +0000
Manifest this update: Sat 28 Jun 2025 18:01:26 +0000
Manifest next update: Sun 29 Jun 2025 18:01:26 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: yEOO9A0c7gRv8miD0hgj553wZOODZ3AKCIKNL94uOCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:89:aa:ac:4c:83:9b:55:dc:6a:ce:d3:cb:d0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jun 28 18:01:26 2025 GMT
Not After : Jun 29 18:01:26 2025 GMT
Subject: CN=48a64f8f0364a0c82f4a5dea0493fdfc1fe6d7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:18:b8:3e:01:30:23:a5:40:75:cb:0c:eb:
48:c1:7a:86:57:31:5b:00:f1:49:81:a2:8f:1c:49:
6f:9c:d7:fd:62:4f:e6:ca:bb:9f:74:2b:31:72:2b:
e8:a2:88:d2:0d:2c:a0:e0:3f:20:e3:a2:47:8a:95:
89:e1:7a:95:45:cf:f4:33:97:88:cf:30:5c:0a:57:
7a:39:c4:2f:aa:93:1a:ad:9f:0a:16:a7:dc:16:e5:
8f:84:a3:87:a8:b2:44:c7:99:91:c7:51:d0:1e:c0:
b9:70:db:e3:60:02:07:3b:16:40:8e:65:1a:ce:d4:
8e:de:28:d2:96:88:14:c4:d1:1d:21:da:d1:2e:0b:
f7:1f:79:1c:21:8c:5e:56:78:81:c2:e2:b4:9a:e1:
f6:12:4c:39:3e:c7:0c:59:d0:b8:e6:71:37:48:eb:
c2:e4:50:38:4d:49:72:2d:ca:87:4a:34:f4:9e:a4:
3c:1b:df:b4:56:9a:96:32:65:37:3e:dc:b9:85:e4:
f3:e7:d5:cf:12:ac:54:a7:e7:ad:1f:6e:42:86:c5:
8d:77:63:ff:42:99:7f:21:6d:cf:8a:a0:f4:df:e2:
84:10:43:81:d7:66:02:6f:38:cb:e8:f0:5e:7e:be:
70:f6:0e:6c:19:89:ca:fd:38:88:c4:5c:28:3f:13:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:4F:8F:03:64:A0:C8:2F:4A:5D:EA:04:93:FD:FC:1F:E6:D7:EB
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:71:ff:b8:a5:e8:65:15:c8:03:f0:84:05:82:9a:f3:20:
2f:0d:fd:4b:ae:21:a5:f8:17:19:30:41:35:22:16:b1:d7:6e:
01:89:81:d7:72:81:9c:a6:ff:b7:74:a8:41:07:7e:17:c9:c0:
77:cd:dd:6e:eb:1f:93:2c:09:21:55:d1:cf:4c:6d:8b:68:f1:
7a:c7:8d:ff:ea:15:9a:45:72:c3:02:ac:e5:94:6e:c0:17:00:
cd:4e:c7:11:f6:43:5e:bc:18:cc:d2:15:3e:14:61:c7:af:31:
5c:0b:ab:72:3a:19:14:5f:36:a3:d0:c5:dc:01:d6:c2:4d:70:
22:ea:9d:7a:9b:dc:f8:bb:ca:a7:cf:fe:89:99:dd:aa:3d:42:
c2:7f:c8:3b:be:8b:0c:33:74:77:72:4e:8d:3a:1b:fb:6a:79:
ca:89:ae:2f:28:b1:85:cd:0f:2b:3c:13:a5:2f:96:bb:6b:b1:
d2:a6:05:16:be:8a:4a:2e:f2:64:d5:c6:8f:76:4d:48:27:79:
33:93:9b:25:21:d0:2b:94:3a:81:07:c6:38:85:d0:a2:23:f5:
f3:77:4c:03:9d:4b:90:20:6c:82:10:36:9b:a5:3d:18:fc:0a:
ce:2b:3e:24:71:9a:59:98:f2:73:e1:55:73:ae:81:99:22:6e:
11:e2:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:24 2025 by rpki-client