Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: W4mZ7uNcQWyXOjqKO2KHKaT9QFn4yJHQUgTz1bE/chM=
Subject key identifier: 9B:80:B9:2E:F3:3E:38:AE:D5:00:A1:A4:17:E8:FB:3F:C1:65:E4:C3
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 0197820DD8A638D11FDAF9F992D0F8E3ED07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 0CA8
Signing time: Wed 18 Jun 2025 08:00:34 +0000
Manifest this update: Wed 18 Jun 2025 08:00:34 +0000
Manifest next update: Thu 19 Jun 2025 08:00:34 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: HbrT/Jgi/ChuGOsdrQpmVUD69tp8RQa6jx6zKeQjr9k=)
2: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0d:d8:a6:38:d1:1f:da:f9:f9:92:d0:f8:e3:ed:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Jun 18 08:00:34 2025 GMT
Not After : Jun 19 08:00:34 2025 GMT
Subject: CN=9b80b92ef33e38aed500a1a417e8fb3fc165e4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:c3:7d:b6:5c:bc:aa:23:0e:85:59:7f:4f:
5b:81:83:97:e8:6c:f2:bd:52:67:46:92:61:de:68:
41:52:e7:da:5b:eb:ff:1e:0b:cc:aa:31:68:da:65:
ff:3c:fb:cc:45:9c:c6:75:01:fa:56:a8:7a:cd:d0:
fb:d5:97:b5:98:6b:84:99:dd:d5:29:f0:4c:3f:c2:
78:c1:89:d8:3f:a6:58:12:08:a4:fe:5d:3c:1b:cd:
12:42:46:af:be:56:3d:b5:f6:3f:73:1d:cf:cf:4d:
1f:0c:68:ad:6b:9b:70:d1:e3:cb:50:cd:44:e7:0d:
6b:98:41:2c:0f:23:92:ce:c6:a2:fb:18:01:26:0d:
62:9f:18:98:cb:ee:a8:74:f3:e4:9d:97:2a:0f:b9:
8e:65:ad:62:e5:9d:6d:5f:76:42:06:40:3d:70:6d:
15:3e:e4:30:4f:9f:b1:f6:ab:0c:48:2a:dc:15:80:
bb:bd:73:f6:8a:ec:b1:44:a3:39:5e:85:6e:b1:74:
89:e5:b0:7d:37:b9:b2:28:a6:96:02:90:ad:fa:7d:
23:5c:61:c0:b0:a7:b6:e0:b4:cb:7f:50:2d:77:58:
4b:c2:61:a9:e2:8f:6b:e6:26:ee:b7:c0:83:bf:d5:
38:53:5e:f5:dc:8e:5a:89:69:80:b8:0d:06:a6:a3:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:B9:2E:F3:3E:38:AE:D5:00:A1:A4:17:E8:FB:3F:C1:65:E4:C3
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6f:16:7c:61:66:14:c8:65:74:74:5a:cb:35:d7:4f:64:83:
86:a3:c4:1f:ad:37:bf:18:64:d8:18:cd:50:69:91:4b:9e:8e:
4f:33:a0:fc:91:41:f2:6c:12:f4:cf:2d:db:d0:90:d1:cf:7d:
51:88:35:bb:48:93:f7:14:ca:6a:76:94:b2:c4:48:43:92:e7:
48:0a:36:86:11:af:c7:01:de:59:77:03:72:45:18:db:ce:7c:
1a:64:99:4d:8c:6c:b6:34:ee:c0:98:ff:bc:a0:4e:ca:f2:9d:
f0:cf:77:84:e6:ec:9f:d6:60:07:ad:32:e6:bc:f0:1f:ea:8f:
ec:d5:0f:01:55:a5:07:37:35:b4:e4:da:3a:97:1d:05:40:57:
71:5a:91:ff:07:4c:02:08:11:7c:f1:52:8c:d5:48:02:d7:65:
28:42:bf:7b:f4:00:ea:12:b4:85:5f:33:2b:84:d2:b4:88:d0:
89:44:33:e1:30:36:8b:8f:ae:7e:20:d7:41:1c:dc:bb:c8:f2:
ee:a4:54:85:d6:5d:8b:00:98:d9:6c:39:6c:3c:de:3a:79:37:
40:c7:39:a7:b1:bb:a1:6b:79:f9:e9:5b:cc:57:cc:90:bd:5f:
1e:e5:f2:a2:dd:47:6e:3f:e4:6e:b2:84:2f:5c:4b:77:d0:e2:
50:0b:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:26:23 2025 by rpki-client