Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: 0QQs6RsfO6yhw1YmUmX6sSfouKxpf75DCYApR03s/SM=
Subject key identifier: 79:75:E6:7C:B2:0F:14:90:06:AB:1A:6B:2E:E4:2A:1F:D0:57:B1:22
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 0197B6D786DBBB720459430B68CB70C7AE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: l/j0tC5Mb7MIuWAVgzQgShpWKwsP6dS6doT/tytT9/I=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:86:db:bb:72:04:59:43:0b:68:cb:70:c7:ae:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=7975e67cb20f149006ab1a6b2ee42a1fd057b122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:3c:66:f8:02:08:27:3f:62:ad:d5:f9:df:
cd:19:bd:cf:1f:82:89:7f:05:9c:da:75:5f:0d:f1:
60:eb:fa:db:e1:3c:d4:a2:91:a2:e5:03:ee:31:22:
fd:a1:9b:7e:d7:48:70:18:ed:6d:90:db:6a:d9:3b:
2c:d8:79:16:46:7c:8e:d5:10:13:6f:39:47:55:83:
83:26:a0:9d:3f:45:c9:30:7f:8c:0f:e7:a8:8f:e7:
09:88:6f:90:9a:b0:44:eb:35:1c:ea:d0:b2:08:08:
95:9f:c5:ae:dd:79:44:79:f6:1d:01:87:c9:01:28:
e2:a1:4b:7f:c3:8a:eb:26:89:cf:64:f6:84:23:dc:
8e:7a:a0:cc:03:d0:79:10:49:41:3a:10:90:ed:0e:
be:77:1f:6d:44:03:89:0b:4e:f1:13:ff:e1:5f:ac:
2d:74:45:d4:19:b0:88:39:4e:b1:90:f9:e7:d0:73:
41:8c:a8:db:a9:c0:b5:a2:ba:9b:62:3a:f2:d2:5c:
1d:1f:36:dc:52:fa:9c:2c:7f:c5:c9:60:c8:9b:4a:
3d:cd:40:91:22:5b:93:f0:ce:8b:67:38:09:91:ac:
40:3c:20:47:e3:f4:19:92:e4:a3:09:d5:f0:82:71:
3c:80:f1:9a:56:1d:83:b8:7f:a0:e3:54:0c:d0:13:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:75:E6:7C:B2:0F:14:90:06:AB:1A:6B:2E:E4:2A:1F:D0:57:B1:22
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:27:85:5f:04:da:bf:ca:86:0b:70:9d:eb:d5:0f:21:fd:62:
ef:85:e9:f4:30:ca:e1:8a:b1:c2:c3:f0:d1:8e:43:ff:16:a5:
77:38:2f:f3:5a:56:34:9a:2a:1d:73:4e:84:67:5f:c9:42:5b:
94:f4:6a:78:43:87:32:95:02:53:cf:70:37:3e:09:7e:b7:05:
ca:eb:7f:4a:8e:4f:c4:fd:14:30:74:b1:da:82:89:31:cb:c2:
30:f3:6e:b1:12:a6:dd:a8:40:01:03:1c:2e:b7:4e:95:d3:76:
08:7a:c3:90:34:43:86:74:cd:3c:6e:e0:83:00:1d:d8:8a:d8:
51:15:da:0e:ca:d8:55:45:20:4e:ea:94:ec:ce:06:ba:28:1e:
4e:5c:cd:cf:c6:50:34:54:9a:a3:ab:fa:52:cc:39:db:89:0e:
af:64:bc:47:4f:c8:db:38:01:7f:aa:94:38:51:8e:95:f1:25:
a1:5d:40:f1:94:c1:d9:d4:52:42:d4:69:cc:94:33:20:f3:29:
24:f4:2b:8d:cf:07:d1:36:68:25:c7:6d:82:17:65:74:84:79:
e9:0b:50:6f:41:25:ca:03:96:4b:66:bf:96:ee:26:0c:df:fd:
65:9e:d3:83:d4:d0:1a:5e:29:aa:07:1b:f8:75:3d:e2:d5:f6:
96:0f:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:54 2025 by rpki-client