Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: nHCTE7U6+ZOz1l97vUZZKCH8ucSfclIhdBEYkyZjFME=
Subject key identifier: 2D:5B:9F:71:1B:3D:08:3F:FC:47:6F:D2:C5:65:AD:3A:5C:B5:08:61
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 0197B5C511A46B0313EFE24062FE93ADF3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 10F5
Signing time: Sat 28 Jun 2025 09:01:20 +0000
Manifest this update: Sat 28 Jun 2025 09:01:20 +0000
Manifest next update: Sun 29 Jun 2025 09:01:20 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: xgmwmj1K6AXEXp+LrykRmE1N302EH+WlA+JwOKv7ZUo=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:11:a4:6b:03:13:ef:e2:40:62:fe:93:ad:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jun 28 09:01:20 2025 GMT
Not After : Jun 29 09:01:20 2025 GMT
Subject: CN=2d5b9f711b3d083ffc476fd2c565ad3a5cb50861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:0f:80:d1:8b:e0:8e:88:1a:94:a9:16:ce:
3e:74:31:57:84:c9:35:df:9b:07:b8:37:66:e0:dd:
bb:ee:83:03:c8:06:99:b1:77:0a:26:82:7a:6f:f1:
be:7d:d1:97:fe:dc:03:9c:f1:78:48:04:2e:84:91:
db:4b:08:78:37:c0:d2:70:88:02:fe:f5:58:2b:b2:
4d:c9:6d:10:7a:d1:82:af:54:46:cd:d0:35:20:e5:
48:5a:99:7e:fe:bd:c6:8b:bb:27:f2:6a:e9:36:59:
3b:e1:a9:33:15:e1:13:a8:87:e8:1a:a8:2d:52:a9:
5e:bc:a5:8d:e0:3c:eb:92:0d:48:03:bf:fb:79:e0:
4a:87:e8:77:75:c5:3d:64:8c:55:bf:1d:20:45:7b:
8c:f6:a0:52:1b:8c:dc:0c:a5:1a:3c:e9:01:d8:52:
0e:4a:1d:6e:5c:64:1b:4e:c7:ac:c4:b0:1f:ee:b7:
2d:e1:24:36:28:80:f9:d5:b6:df:2f:c2:4a:0a:c2:
24:3d:41:bf:16:c4:74:4c:77:1a:71:6d:a2:44:dc:
59:fb:d6:98:43:10:78:39:b2:97:b3:e7:9b:b8:b9:
61:5c:fd:83:a0:70:a5:ff:39:f0:c6:96:45:3c:ad:
1b:06:ae:8a:a0:37:d1:5a:2c:4a:bd:c0:e9:32:78:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:9F:71:1B:3D:08:3F:FC:47:6F:D2:C5:65:AD:3A:5C:B5:08:61
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8d:4e:21:6e:b1:73:98:92:1c:47:0e:f6:c5:38:4b:4f:37:
cd:c5:2e:ed:18:7d:1a:77:8b:9b:9f:50:83:a2:c7:94:9d:ac:
f4:f6:58:38:ae:56:bc:77:7c:76:3e:bf:cd:65:15:1a:b6:2a:
a8:07:15:49:b0:3f:c8:1c:53:f9:64:a2:f1:a2:d1:6b:a4:5a:
d9:e6:e2:31:8c:62:ce:a8:df:f1:d1:8a:0e:16:d4:69:dd:8c:
91:12:df:49:61:32:d4:ba:ed:95:2d:11:00:c9:e8:30:5c:30:
af:59:ca:2d:f2:ef:e9:a3:cd:1d:6b:08:5c:e8:e2:d3:7e:ca:
9c:ee:48:66:a8:5c:93:b0:2b:1a:21:39:78:2d:93:f6:70:c5:
56:be:56:2b:2f:40:c2:99:fa:3d:7a:8a:62:79:13:a8:6c:d1:
7f:30:66:95:ff:03:90:a2:b8:c3:33:fe:ad:03:bb:5a:79:83:
0d:c9:cc:e5:6b:57:84:5c:99:a0:f3:29:3d:58:a9:1f:2a:ae:
e1:2c:f0:91:d7:6a:d7:1b:a2:ac:5e:e6:f8:6c:f6:7f:85:b2:
b0:30:f1:6d:6d:d4:24:69:64:8b:7b:01:43:d9:21:6c:2f:bb:
42:8e:43:0e:4c:27:04:00:b5:7d:af:29:ac:4a:c1:2f:f7:e2:
0b:aa:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:41 2025 by rpki-client