Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: 5J6qvmCoOVfsPoA1R6zvfx1Bupf7FNXXWxqMEvXYGsQ=
Subject key identifier: F5:49:DB:1C:75:36:E9:1F:72:68:56:08:67:91:BA:EE:5B:F1:4C:C2
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 0197722CBA35C53A8DE456D1C6ACE2FCFA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 14D1
Signing time: Sun 15 Jun 2025 06:00:23 +0000
Manifest this update: Sun 15 Jun 2025 06:00:23 +0000
Manifest next update: Mon 16 Jun 2025 06:00:23 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: Hp0BFK/QsAVNbCgHUYHADrRYjEKYgIA9v3fTvG90J7k=)
2: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (hash: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:ba:35:c5:3a:8d:e4:56:d1:c6:ac:e2:fc:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Jun 15 06:00:23 2025 GMT
Not After : Jun 16 06:00:23 2025 GMT
Subject: CN=f549db1c7536e91f726856086791baee5bf14cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:40:24:5d:d8:d5:51:38:53:50:24:97:11:
2a:10:82:5e:b9:73:4e:d8:15:57:6b:e2:43:3c:5e:
c4:e5:ac:99:e7:d5:35:7d:67:5e:a2:56:d2:7a:71:
9d:f0:d5:03:59:87:61:5c:d8:d6:76:41:73:94:3b:
68:b7:98:07:fa:81:6a:80:e8:6e:36:d4:b0:c1:0e:
b0:18:71:58:b8:be:4c:1f:41:85:c9:ef:e6:c9:a1:
b7:2b:83:43:56:a5:8f:40:4a:2b:f3:4f:ec:b1:77:
e9:c7:80:ca:d8:7d:bf:5b:79:09:c4:ad:64:d2:dc:
43:24:87:83:42:55:97:df:b8:a4:4e:79:42:b6:12:
99:ee:47:00:96:8b:91:c2:f3:03:39:09:8d:46:ad:
69:5c:9a:58:b6:0e:0d:13:25:83:b2:87:8c:0b:43:
91:f0:c2:2c:f2:9e:bc:d6:59:5b:98:92:a6:02:f3:
98:87:65:58:6c:bd:59:3b:96:a7:08:8e:be:92:f6:
45:ec:30:56:58:11:21:af:71:a1:b3:2c:cb:19:2d:
b1:0e:1a:b4:fb:23:e7:fa:d2:08:3e:60:42:d9:50:
9e:11:a3:99:41:9b:0d:b4:81:6a:40:93:f1:9a:2c:
5e:58:db:3c:ec:d6:b9:b6:b6:dd:f3:e6:e9:7d:3f:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:DB:1C:75:36:E9:1F:72:68:56:08:67:91:BA:EE:5B:F1:4C:C2
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:82:0b:ff:c0:22:5f:e5:9f:cc:ba:7b:ed:24:63:9e:a6:f4:
05:d0:03:d6:f8:49:96:04:98:88:0f:c5:a5:6b:f9:1d:bf:84:
c4:fa:58:9c:a8:17:b1:5b:42:10:aa:91:b8:55:e2:df:c0:db:
df:e7:a0:20:06:7b:ed:b1:00:db:07:5e:63:f4:8c:0d:34:65:
61:c6:1d:66:b0:ed:b0:dc:56:ef:ee:a2:58:27:2a:bc:e1:4d:
f8:00:9f:19:a1:b9:c9:5a:cc:70:44:81:80:63:bd:4d:17:97:
e8:7c:96:ba:f1:e6:53:df:99:2a:5f:ab:ed:2b:90:d1:c7:02:
5a:a6:dd:50:a5:24:58:d7:28:cc:95:cd:b5:e7:69:f2:0f:13:
1f:c8:df:21:eb:e5:ba:06:c4:e2:f1:ac:ab:d4:71:74:9e:9c:
5b:3d:38:d3:59:67:19:ed:9c:7b:11:75:17:c4:21:59:f3:d7:
18:c2:17:02:35:4e:c7:41:a6:e6:aa:5e:a3:f5:d9:41:5e:f2:
97:b6:11:1d:47:b4:98:74:b9:47:a9:8a:ec:5e:09:2c:19:93:
c5:b6:a6:71:58:ba:0d:b2:5e:8b:df:df:02:42:16:3e:3d:3f:
77:ae:90:f8:0c:b5:b9:a4:b8:4c:9e:d4:2d:80:6e:d6:67:5b:
db:01:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:04 2025 by rpki-client