Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: EQfFzBqEiOG6ame/+ahN9HVRfvPKtCIhGDKvz/8t4Ts=
Subject key identifier: CD:84:25:7B:2D:16:5D:20:56:F4:40:60:FD:F7:78:2D:33:4B:48:AC
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 0197B77C27BF88479C75BD958CED7A014269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 158E
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: qOGFF4H0IQiOZ7MRDoA1Ppoew4w8IP82VQv2U0ZX9eA=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:27:bf:88:47:9c:75:bd:95:8c:ed:7a:01:42:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=cd84257b2d165d2056f44060fdf7782d334b48ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:ce:5a:d8:18:55:eb:c4:d7:fc:ee:9f:1d:
3f:88:93:d0:9c:e2:6c:52:fa:2d:80:43:c6:19:26:
8f:58:47:43:2d:09:89:36:40:62:29:77:02:9d:9f:
49:c0:ba:0e:ee:cb:f0:0b:90:fe:16:9b:0f:de:f3:
a0:d6:9d:2c:6c:36:47:38:84:8e:a4:ee:43:35:b1:
91:8a:ca:ea:f3:fc:00:75:e4:60:bd:35:59:47:50:
de:4a:e5:2f:c4:6a:b0:f1:80:9b:3b:a8:be:eb:b3:
77:c3:31:f9:f6:69:9b:39:c6:5e:df:69:4f:d4:cf:
64:25:dd:d2:fb:ba:b7:57:1d:1c:d4:bc:7a:59:1a:
1f:59:c1:e1:ef:63:a8:2c:01:b4:11:ec:f9:16:45:
4a:47:70:12:4e:40:b1:a8:0c:86:21:89:4c:80:b2:
4b:7d:48:f2:e1:33:55:e8:b1:ea:9f:ca:53:69:62:
d7:65:56:27:ac:41:59:87:be:d7:ab:93:fb:f1:5b:
4c:fa:af:dc:1a:75:2f:8b:e9:67:00:b5:29:25:09:
dc:84:aa:32:d0:87:a2:54:65:9c:c8:b2:5b:66:0c:
f3:c5:e6:5d:69:f3:49:6c:92:c1:0b:d6:e1:cc:70:
58:74:e2:e1:eb:c7:e3:4a:66:a2:2b:71:57:75:24:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:25:7B:2D:16:5D:20:56:F4:40:60:FD:F7:78:2D:33:4B:48:AC
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:88:4b:15:fa:82:6b:44:20:1d:f4:8a:20:b8:3d:df:f1:
c1:50:b6:31:9c:9a:b2:41:c5:1f:90:42:2a:b6:80:db:2d:22:
4d:37:26:51:4c:df:6e:be:ab:6a:3f:7d:cc:bf:d8:88:1d:da:
73:a3:6e:40:f5:4e:f2:6f:12:c8:82:34:f6:aa:3d:4b:b7:3e:
cc:f5:ca:da:0e:08:45:44:0a:c8:34:c9:a9:fc:c0:4f:76:b4:
3d:1c:83:02:12:dd:07:9c:62:fa:4e:8f:84:fa:0c:cf:38:3c:
fa:a9:77:fc:6d:61:83:cf:42:45:53:49:1a:9e:82:bb:f2:68:
a2:a6:61:04:76:f0:56:f6:09:97:58:a7:f2:ed:5d:29:76:b9:
74:92:3e:da:50:aa:ef:ed:ad:9b:f8:f1:c2:24:39:8d:72:aa:
97:48:cf:c2:62:31:a6:fa:48:96:0a:79:08:80:e0:0b:5a:83:
94:93:a0:6d:33:ba:fb:31:41:77:a1:ee:cb:6d:f0:79:0f:fc:
d9:04:6e:0d:82:95:55:48:a9:d7:5f:6a:df:73:ac:87:5a:27:
d0:f8:68:36:a0:06:c9:79:47:7e:c7:71:0f:e9:87:71:28:28:
72:31:88:00:f2:ae:83:2f:f5:cc:4f:1b:5c:43:a6:33:c3:d8:
b8:99:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:51 2025 by rpki-client