Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: k5B2BdBtMGgWntq5v8OsbrFZ5Bvqtz0jS8feCq6xIeo=
Subject key identifier: AA:95:2D:55:A4:94:D9:81:75:45:8B:1F:FE:99:D4:AC:C2:7C:E0:0B
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 0197B7453DE15F9DD1CF405EC66199A67E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: fXubxEtfbosQCFOZDwmvgv7sd/NGO6+RzhO4Ili7Ss8=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3d:e1:5f:9d:d1:cf:40:5e:c6:61:99:a6:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=aa952d55a494d98175458b1ffe99d4acc27ce00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:dd:92:2a:25:04:6c:68:38:56:a5:8d:af:
94:c1:04:55:8d:1d:56:ad:4b:fe:80:9e:b5:f1:77:
85:7c:05:1d:aa:0b:07:18:84:01:fe:72:12:ee:62:
a6:e9:cf:9e:f5:a2:9b:36:ab:61:8d:63:42:6f:b5:
19:2c:66:a9:e1:c9:d6:67:1b:ba:71:82:d6:c6:5d:
d4:0e:17:eb:66:37:15:1d:b0:88:71:99:ef:4e:05:
60:5e:06:2e:bd:a1:b0:f6:84:62:25:a3:75:1c:11:
df:ac:8c:f3:ad:99:94:fe:5b:8a:83:77:d4:4b:79:
5f:58:3f:f8:ea:71:70:03:fc:70:66:35:39:b9:18:
91:69:ca:60:c2:79:eb:2a:03:ef:4d:a8:2b:a2:69:
0d:4f:e2:9f:29:e7:07:8b:a2:4e:21:93:f3:d4:92:
2e:4c:00:12:c1:87:8b:45:f2:7f:96:40:9e:6f:56:
9a:b6:68:63:18:f0:f5:df:6e:f1:9f:ea:05:59:dd:
86:03:bc:7b:1c:5f:08:b8:7d:1f:0a:7f:de:05:c3:
85:99:59:9a:b7:5e:ee:62:2f:12:c6:12:b4:fa:ef:
f7:da:2d:94:fa:47:6e:2c:07:81:c1:a9:3c:20:22:
df:88:7c:ec:ed:e3:f9:26:34:8d:2b:37:ed:00:e6:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:2D:55:A4:94:D9:81:75:45:8B:1F:FE:99:D4:AC:C2:7C:E0:0B
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:e0:15:c5:e7:94:5a:11:e6:22:b1:23:76:d4:80:22:80:
40:9b:5a:9f:90:76:47:bc:e1:f0:3b:4b:0a:89:a5:fa:9d:2d:
d2:3f:77:f6:fd:6c:37:75:05:22:36:e2:f3:ab:3f:84:6b:ef:
5e:0a:73:98:ce:ed:3f:34:8e:ef:63:c9:02:bc:d0:47:51:51:
3a:e3:07:18:38:c0:e1:d4:6d:7c:37:2d:37:0b:90:ea:24:1a:
f6:ee:1a:70:c7:30:94:30:03:0c:af:71:69:e4:5e:ef:9f:74:
29:7c:f7:79:6c:3e:f9:be:9b:d9:14:d8:35:fa:b3:5a:aa:99:
a5:d5:54:76:6a:b2:d4:b5:97:34:9f:c5:9b:76:6d:bf:e6:fe:
ed:cc:c3:05:98:3f:44:bd:4c:a5:92:e3:84:89:a2:ce:b1:ba:
63:07:94:ba:06:7d:e5:4e:16:23:17:09:f2:d8:22:4e:a7:1d:
2c:03:11:08:dd:7f:db:b7:e9:2b:1e:3d:ff:f1:0d:68:1e:94:
2c:97:0c:f0:65:61:77:d3:87:6a:d4:e1:86:4e:12:93:b0:57:
c7:c7:7a:88:ff:0f:71:e3:09:7f:b7:f0:af:b8:55:2e:04:90:
9b:17:66:1a:aa:38:9f:8a:34:55:80:6d:d8:f4:13:b4:5a:7f:
f6:a2:34:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:12 2025 by rpki-client