Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: 2Ejv5827T74nv8DHHOC+1hjeX/R0SK7R7Tf705zokhM=
Subject key identifier: E0:41:4E:AF:31:62:A0:C7:5C:6E:A6:CC:45:60:8E:4F:07:B4:DF:FA
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 0197B6A233DD45996391532161A15EB5641B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 15D0
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: +enQa+xZJBSlzrCoSSW+9arybkgjdaFQQFzmeDSY/sc=)
3: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
4: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
5: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
6: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:33:dd:45:99:63:91:53:21:61:a1:5e:b5:64:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=e0414eaf3162a0c75c6ea6cc45608e4f07b4dffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:21:3d:2b:ee:3e:1c:19:90:ce:5d:e2:6e:
45:cf:fa:17:50:17:55:58:05:1d:77:3b:9b:2d:a4:
53:a5:38:1a:2b:1b:ca:0a:74:88:6a:c9:5f:91:f5:
8f:ef:20:4b:37:91:ea:d9:1e:26:6e:de:32:c9:75:
f7:5e:a1:8e:a6:55:2a:81:e5:0c:8f:17:e8:5d:f2:
0e:46:a5:80:3e:44:fa:4c:4b:49:be:8e:f8:64:62:
90:f5:4b:ee:77:cd:49:29:eb:1e:85:24:b6:17:62:
b3:d5:60:76:e9:31:ca:2b:1e:bf:a0:55:9f:6b:65:
53:8f:6e:e6:a7:39:06:2f:70:e3:09:98:6d:84:f2:
a3:63:6c:7a:df:ef:cc:bc:6b:bf:35:2d:e7:bd:59:
e2:0b:34:95:f9:39:24:97:86:2e:0f:df:63:3b:08:
a3:b2:14:57:ba:8d:64:d7:a5:27:58:8e:ce:c4:eb:
98:12:a5:0d:01:0a:13:5e:ef:f8:0a:74:f3:f3:59:
4d:c3:1a:f2:8b:64:6d:b4:82:2a:6f:a9:65:53:6a:
b5:00:26:e2:34:31:f2:bc:8e:7c:a4:cc:46:ff:9e:
79:9e:32:86:d6:f7:f6:e4:b5:36:78:ab:8b:c2:99:
af:e7:a5:b0:67:8f:7e:76:cf:67:e4:4d:d5:cc:2a:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:41:4E:AF:31:62:A0:C7:5C:6E:A6:CC:45:60:8E:4F:07:B4:DF:FA
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:19:dc:cc:5b:e9:a9:65:61:aa:93:26:1a:e3:8f:93:fc:c8:
15:a7:84:13:d1:73:5d:0e:13:14:83:57:ab:51:13:4f:f1:09:
11:98:ee:e1:81:c2:ec:75:18:58:c3:6a:49:ce:1d:12:3c:4c:
e7:12:ea:25:fb:0a:4e:15:96:b3:06:c6:9f:f9:bc:2b:ed:32:
4a:23:38:6f:67:20:e3:9a:bf:0e:a3:4d:7e:6b:b0:75:1b:fb:
c0:60:68:ab:8e:60:da:ef:93:53:fd:e3:7e:c2:12:9d:af:6e:
3c:6b:85:6b:b4:4f:fb:98:bb:ac:e9:dd:0e:c4:94:56:f5:d0:
39:f3:be:58:03:8d:a6:8a:9a:b8:b1:6a:1b:cf:29:ab:d8:75:
fc:b9:8c:e5:9b:1b:b6:ba:21:e2:e3:17:f8:31:96:93:e9:51:
78:d1:7c:87:e6:f9:b3:1e:65:94:52:46:c8:8f:17:f6:00:2e:
ff:22:be:7c:80:37:f1:49:f2:b4:1f:24:bf:27:ea:a8:6f:7a:
e9:95:ed:7a:fa:5c:78:17:13:28:f5:38:b2:b2:1b:e1:9e:f4:
67:c0:dd:26:a7:1c:77:1d:9d:19:81:ab:d8:d5:bd:2b:31:53:
28:aa:78:73:54:ae:39:ee:92:cf:bf:3a:c2:31:07:36:e9:08:
f1:d6:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:40 2025 by rpki-client