Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: HXXGOaBAyXrxnyMnGErGJisbdCrXY+d049meZUnXtlc=
Subject key identifier: 9A:66:EF:A2:0A:23:3E:33:AB:9B:BF:6C:6E:AB:93:04:E0:0F:44:71
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 0197B77C8145A06E64724CD21B83ED576B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 0EB7
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: rFf26vs/oXD/SxTLzHhjJgd1juDBG7x6ys2BxnHT/6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:81:45:a0:6e:64:72:4c:d2:1b:83:ed:57:6b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=9a66efa20a233e33ab9bbf6c6eab9304e00f4471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:32:bb:e6:b9:65:1b:43:cb:72:17:59:32:
26:74:01:e5:19:3b:27:19:e0:74:1e:e5:42:74:27:
5f:17:5a:b8:ab:e9:2a:f0:e9:6f:27:8c:3c:c4:c9:
69:af:60:a9:d7:b0:c5:91:21:5c:ff:13:62:e0:13:
70:f1:e2:30:ac:49:25:f5:04:ca:f5:c9:cd:43:5a:
d2:72:ad:2f:c2:6a:de:c0:d8:e3:c6:9e:e2:39:cd:
e2:af:fd:17:57:7b:8f:71:1d:52:eb:f5:ff:60:f1:
3d:ae:39:d9:21:1d:99:49:94:6b:15:01:54:5e:e4:
40:c8:df:cc:d3:60:21:c7:5a:df:3f:14:32:f2:88:
93:21:35:a6:33:a7:b2:76:8f:fe:1d:75:80:07:4c:
a7:31:bd:06:69:5a:ae:dd:03:1b:21:03:95:f2:d6:
00:81:5b:4c:47:09:32:06:17:ff:31:b4:e6:1c:ed:
ed:9f:c9:2f:19:fd:35:c0:6e:d9:40:ec:10:4c:d2:
78:27:f4:85:c4:5f:11:c9:ad:a3:82:5d:f2:6c:c4:
99:d1:a2:1c:4f:2b:01:3f:d5:86:d0:dd:2b:d3:3b:
cb:b6:06:ea:49:46:e0:da:b5:d0:d6:68:d4:c7:44:
f1:d5:8b:34:10:2e:ff:71:67:cf:e1:c3:16:d3:e1:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:EF:A2:0A:23:3E:33:AB:9B:BF:6C:6E:AB:93:04:E0:0F:44:71
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:50:c4:f4:71:5f:96:f8:33:63:c1:3e:d4:5b:f2:a8:be:76:
f0:07:f4:fc:76:8e:c0:bf:19:fb:bc:85:0b:6f:d1:4c:d2:50:
08:81:23:9d:68:72:c0:a2:33:66:c9:eb:ff:1b:75:35:7b:c9:
27:ca:b0:ee:25:ff:ef:6a:58:60:56:6a:0a:aa:bc:69:8a:dc:
4c:15:2a:38:4f:06:c1:de:60:24:31:ad:6b:d5:08:f9:b8:1b:
d3:e9:9c:69:fa:4e:8f:e1:b4:dc:12:bf:9a:af:fe:ac:0a:c6:
c5:cc:82:13:0c:aa:9b:cf:b7:c4:f7:20:ef:b3:c0:c0:81:85:
13:e2:23:f9:a1:ec:80:03:b2:17:99:0b:c4:97:a9:46:07:87:
12:37:b0:06:87:bb:03:25:3d:7a:e1:c2:03:a3:af:36:95:67:
d6:84:8e:79:6e:33:cd:bd:04:c0:ff:88:77:00:ac:d7:7d:93:
71:29:b4:23:e9:d0:7d:1f:21:2f:bb:53:51:02:89:06:44:68:
b7:6b:d0:67:b5:db:83:41:d3:23:dc:b5:2a:90:8a:cc:2a:72:
4c:ef:28:65:5f:68:ef:dc:a7:bc:4d:e2:4b:8c:b3:69:40:8b:
d3:bb:29:e9:75:d3:d5:a2:ef:93:14:25:cf:90:2b:83:f1:4b:
d3:e5:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:17 2025 by rpki-client