Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: P90YPFdQyZcTkh3mdOKnIl8nAWtoMEmvMXp2K9XuJHU=
Subject key identifier: 27:F6:46:5B:9C:2C:72:5D:08:74:00:DD:09:D3:95:49:71:9A:53:3E
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 0197B7B35E0A67A2BC11B663F8FE76CE0FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 051D
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: euocO+O9NPpRO7HKbp6Pt7mbaCwIJRHqSkTPuzpdhm8=)
2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5e:0a:67:a2:bc:11:b6:63:f8:fe:76:ce:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=27f6465b9c2c725d087400dd09d39549719a533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:6a:26:dc:e9:d1:72:c8:89:be:1b:71:8d:
c5:09:7e:b1:fa:08:e4:a8:b6:f8:24:41:d0:40:83:
71:fe:21:97:92:35:93:02:9b:e8:5b:e8:2a:ff:b2:
fe:bf:07:a2:40:d0:0f:69:6a:d6:a2:99:35:59:9b:
6d:0b:fb:77:f8:eb:10:22:5a:e8:14:28:c9:f4:e4:
63:fd:5b:81:54:da:c5:c6:1d:57:5e:2a:b1:96:42:
8d:f7:50:17:d0:f3:9e:6b:c5:59:10:7f:06:fe:53:
97:56:68:fd:4e:10:f8:d7:72:05:2b:bc:b7:92:7a:
b7:b0:62:a2:06:ee:b3:57:6c:67:36:8a:b9:ba:10:
b5:fc:4b:60:9b:c4:40:4a:7f:bd:bf:70:d9:a1:af:
d2:18:75:46:62:6f:8f:23:54:29:5c:a1:5c:f2:91:
d3:22:36:e3:b4:b6:49:78:e2:11:c9:a5:c1:88:c4:
60:b2:00:2c:37:88:7c:34:c6:81:ba:b6:07:0d:2a:
d2:db:61:f4:66:97:bc:b6:9b:d5:26:e6:13:68:7f:
61:71:86:37:57:63:24:fb:e2:e0:19:76:b0:07:3b:
a5:3a:b6:1e:41:b0:84:f6:e0:a1:c9:06:79:e7:c7:
4c:8d:3a:74:4d:36:d3:7f:1f:d5:cc:65:78:75:66:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:46:5B:9C:2C:72:5D:08:74:00:DD:09:D3:95:49:71:9A:53:3E
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:66:9e:da:86:de:0b:26:2d:09:1e:fc:14:9e:90:d3:6a:20:
14:37:66:c5:d7:cc:9f:e8:fc:44:ca:3f:4b:6f:fd:12:5d:f5:
04:5e:8d:49:54:d0:af:20:8f:3c:3f:1e:85:b1:0e:07:e2:98:
26:b9:27:78:df:6a:5f:37:68:a1:c6:d8:fa:56:c2:16:7f:ca:
c2:ac:79:63:5c:77:97:eb:42:98:59:f0:91:7a:d0:01:32:5e:
db:9a:f9:aa:fe:21:9d:59:6b:5b:98:e6:82:81:f3:0c:28:6c:
91:78:bb:d5:37:02:bf:d5:2f:ea:08:85:62:4e:36:5a:42:a3:
8e:70:d6:7b:89:82:c7:21:c8:17:41:85:4a:07:e4:ab:b2:54:
7e:58:f8:07:27:49:4e:d7:8c:56:34:18:19:12:61:d8:a8:cc:
d2:df:28:14:55:e1:11:a8:5b:68:a1:ac:e7:16:06:a6:da:f5:
39:a1:48:76:e1:09:45:66:02:68:e0:08:38:8c:6a:d1:90:5d:
d4:c5:ae:12:71:7c:44:f4:18:81:18:84:90:11:a2:73:44:6c:
05:85:61:f9:34:26:9b:c8:6b:94:b3:c2:4d:2e:50:5d:9d:bc:
48:f9:d2:1f:00:32:4c:7c:4b:8f:43:7c:e6:65:27:3b:35:56:
70:fd:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:01 2025 by rpki-client