Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: An3HEITPXhgvwPEmjpyHaDRWsKaGjLVRuUQPgbzuaro=
Subject key identifier: 0F:4E:86:0D:6C:53:A2:18:82:0C:75:73:93:DE:4F:AA:57:80:0F:3A
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 01977D8C149C547442B9E977E87A43B37C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 15A0
Signing time: Tue 17 Jun 2025 11:00:21 +0000
Manifest this update: Tue 17 Jun 2025 11:00:21 +0000
Manifest next update: Wed 18 Jun 2025 11:00:21 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: PcNGf+8nM+jpULjQx+REMfps+7Zf2rI4iXjICJObA38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:14:9c:54:74:42:b9:e9:77:e8:7a:43:b3:7c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Jun 17 11:00:21 2025 GMT
Not After : Jun 18 11:00:21 2025 GMT
Subject: CN=0f4e860d6c53a218820c757393de4faa57800f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:21:da:6b:5c:62:73:f6:04:c0:d3:7f:04:
34:9e:03:17:d1:05:7b:cf:a2:7c:fc:ef:98:40:ef:
22:79:6b:70:53:d5:1b:74:77:e4:b3:c1:d1:46:5a:
72:e4:0c:a8:53:57:e7:9d:30:4d:23:c9:43:ac:ab:
78:79:6c:59:cd:33:77:3e:25:10:42:cf:ec:e2:37:
d0:ef:d6:4d:b1:5f:33:2d:c0:44:b5:36:6e:42:64:
c4:e2:77:2b:cc:0d:be:59:4d:e5:93:53:b4:1e:70:
4c:4e:ae:ec:7d:22:46:9e:78:82:78:20:2d:be:01:
c4:51:4d:19:d8:22:a4:2a:d2:53:9c:4e:13:20:b6:
aa:ad:66:c6:f8:cc:1f:87:67:75:2b:92:c1:9f:75:
e3:41:00:f3:00:34:7b:53:a4:68:b0:0e:4b:77:ee:
98:b6:21:76:46:09:4a:22:80:df:6a:7d:5e:fb:f9:
5c:a9:2a:6b:84:74:84:51:b3:c1:22:77:aa:20:60:
44:36:18:99:a2:f9:be:7c:25:35:ed:8c:6c:ee:36:
dd:7b:43:7f:1f:0f:b6:56:3f:e3:4a:9a:51:46:30:
c4:c2:6d:2e:4e:c4:a8:3a:56:28:8d:a1:eb:1d:64:
b0:d0:0b:65:d7:a3:7a:0f:ee:e1:70:b8:c2:f1:6b:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:86:0D:6C:53:A2:18:82:0C:75:73:93:DE:4F:AA:57:80:0F:3A
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e4:1f:ac:d1:d5:ef:18:d5:ef:1f:01:03:e9:91:89:65:9b:
62:4a:54:65:a9:ae:e5:b7:83:0c:8c:88:db:6f:b4:6d:1a:4d:
2a:f8:be:db:77:64:19:32:90:a5:b4:56:15:38:19:ee:09:60:
7a:16:97:ae:7e:31:7f:8b:60:61:b3:49:4f:79:f7:ae:ef:31:
34:fa:be:ff:c8:33:bd:93:09:fa:3f:c7:b5:0f:a4:0b:e0:a7:
11:92:e1:38:ef:52:ff:8a:38:8f:02:90:db:42:fd:5a:bb:9f:
e7:26:4c:77:95:5c:d6:e4:39:4b:ef:cf:ca:35:90:c7:c8:5f:
21:c4:83:8a:85:88:7a:6a:f8:18:5b:ec:f9:00:9f:e0:76:cb:
91:bf:4d:ff:62:5b:bf:bd:00:c7:1d:95:bd:9b:ae:1d:6a:d0:
0c:13:6e:b2:55:ae:72:be:95:68:97:d4:ec:8d:58:a7:22:d4:
cd:33:c2:7d:ff:69:18:5e:e8:28:b4:5b:16:80:c2:fa:6f:49:
4f:b6:be:37:e0:51:a7:17:60:01:91:ed:fd:fb:d8:b6:02:74:
fb:68:ae:d8:6c:46:ab:5f:d2:95:5f:23:23:17:4a:0b:55:6a:
4d:c2:c1:ad:33:87:17:18:a1:68:74:bc:78:31:27:22:8d:28:
d3:88:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:23:16 2025 by rpki-client