Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: Iruve1o4cKcUIhk6q5ZEPCwexKJjoEhsXtaDPheb0js=
Subject key identifier: 9F:39:77:85:CF:4A:76:01:46:A6:4B:95:C9:E7:2F:EC:B1:C4:45:D0
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 0197B77C8DB6659EEE4849A95B140957593F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 150F
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: /buQxxD3I+J2o4ygf33CYz4S29VCcWA+rtCj4yVun88=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8d:b6:65:9e:ee:48:49:a9:5b:14:09:57:59:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=9f397785cf4a760146a64b95c9e72fecb1c445d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:08:95:5f:3b:9e:a8:b6:72:8c:72:aa:f1:
c9:4f:82:e0:0d:0f:a6:7b:d1:7d:8d:7b:f5:3e:cd:
38:01:b5:ae:99:90:ba:55:d9:b5:34:c5:d6:f2:51:
ef:cd:73:2f:21:54:e1:d8:78:a9:d1:11:25:d0:d9:
66:7a:9c:81:68:94:88:9b:ba:42:a9:a2:5f:f3:a1:
07:7a:27:b1:a9:6a:d6:c9:94:79:7e:48:06:bb:f6:
79:e2:98:07:bc:28:12:23:00:1f:31:a5:f7:95:7e:
39:ae:7d:5c:c3:16:b5:cd:8a:11:20:70:cf:ef:e7:
c8:5c:55:01:9b:27:ea:1a:68:0f:68:b1:39:f8:1c:
5b:73:25:91:ae:d9:84:93:bf:e6:6e:6c:f1:c5:b3:
4f:f1:c9:0e:76:8c:9f:4e:fb:bf:16:6a:86:94:b9:
f3:c7:a5:8e:d8:e5:9a:9c:ef:c6:c8:12:08:8a:96:
cc:0a:d6:2b:b0:2a:e1:27:a8:1a:2b:9d:0f:a0:55:
22:bc:ab:fe:66:0f:fd:c2:58:5b:c7:bc:ba:3e:73:
74:b5:2d:0d:4b:a5:71:d9:e8:ae:20:0b:3d:d1:d7:
a8:57:65:14:51:86:90:2d:ba:a5:a1:80:94:e4:95:
39:a0:4d:dc:b6:d5:25:fc:ba:15:9a:49:6f:a6:9a:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:77:85:CF:4A:76:01:46:A6:4B:95:C9:E7:2F:EC:B1:C4:45:D0
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:90:03:dd:1d:e8:53:fa:9a:14:e4:57:3c:dc:24:e7:1f:
d3:1c:6b:40:1c:7c:c9:a0:9b:84:4d:d1:81:67:98:0c:8d:26:
8d:a5:70:b0:5b:c0:cb:ec:b3:59:9a:c4:2a:8a:ea:71:37:a0:
5a:78:cc:90:3f:99:cc:f9:a6:0a:6b:af:ff:31:1a:d3:27:8d:
7c:15:89:c7:af:a9:8c:8b:82:a1:cd:17:26:c3:9a:91:e4:1b:
9d:f7:a6:e2:b1:49:69:1d:77:a4:76:14:d4:3e:1b:30:37:c9:
83:a5:60:24:0c:0f:d1:8a:ea:20:aa:67:03:0a:81:e4:43:1e:
d5:e5:57:a8:26:6a:8d:a4:ec:39:0d:9d:6d:11:eb:2e:2d:3e:
d5:74:e8:b7:45:ea:14:0d:a2:e4:83:d8:43:a9:de:17:3a:b9:
7f:9a:75:83:68:6b:52:76:e6:06:0d:16:57:ed:60:3b:7f:88:
fa:16:56:b4:e9:3e:6d:9c:57:c3:d6:df:90:fc:2d:e9:29:de:
95:ea:f2:f9:27:f3:1b:8e:72:52:ff:4e:54:a7:8b:7f:48:92:
01:86:05:a7:f2:24:18:e6:49:79:7a:7a:22:78:97:a3:b8:65:
9d:3d:df:86:b7:61:07:a5:0b:0e:28:f3:af:9e:0e:9e:29:2f:
f1:49:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:24 2025 by rpki-client