Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: 6gubX38X+0OHHFMLwP1ssBV9wanycLGq2Ea7DvpsdPw=
Subject key identifier: 62:92:13:6D:EE:E9:65:0D:6D:98:6F:04:28:A0:48:F6:5D:E3:F1:AD
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019771F614B1AEC481FBCC7E24E6B2496553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 05:00:41 +0000
Manifest this update: Sun 15 Jun 2025 05:00:41 +0000
Manifest next update: Mon 16 Jun 2025 05:00:41 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: rNxhgoJU7OZZpsr2JbhPnRAQ5bJu8fDyN/61IhYZKo8=)
2: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
3: nB_zoF-5vRmGl3d9TG824Zcc-nw.roa (hash: m3z2itiLoAbrDtSbjfB2c49btcR+jFaVv3ZdkaLWcmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:14:b1:ae:c4:81:fb:cc:7e:24:e6:b2:49:65:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jun 15 05:00:41 2025 GMT
Not After : Jun 16 05:00:41 2025 GMT
Subject: CN=6292136deee9650d6d986f0428a048f65de3f1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:83:b3:95:d4:65:ce:67:d2:6f:dd:3f:3d:
d2:83:7a:54:5b:74:46:1d:6f:9a:73:56:d7:ea:03:
bc:a5:92:3b:ea:49:16:83:4e:03:48:a0:e6:5c:db:
ca:e1:b1:8a:06:a2:a0:39:44:78:c0:ca:3a:d5:0f:
e1:67:65:db:10:02:9a:4f:9f:15:73:e1:48:f8:aa:
6a:ff:a7:79:ea:ea:e0:98:63:72:c9:bf:9c:00:2b:
dd:e7:a7:3a:fa:7b:1f:48:1e:27:1e:a9:77:5a:78:
c4:88:90:7b:ec:59:25:b5:a0:35:40:6e:14:6e:65:
81:25:ba:28:41:81:9f:f0:7c:d1:52:8b:6b:5c:e7:
36:35:cc:8e:d6:63:ef:fa:85:d2:d3:89:e7:48:78:
ef:b6:ea:6c:98:83:9e:a0:ce:d0:c7:d6:81:85:79:
5c:db:4b:03:5f:5b:0d:f0:1b:24:36:a9:c3:bc:15:
6c:a2:1d:3b:84:7f:59:fd:9c:d4:41:3f:21:74:24:
95:27:2d:5d:d1:02:cc:b3:d3:4b:7e:e1:f0:06:22:
51:08:dc:ba:ef:a5:44:ca:85:4c:f7:39:28:70:ce:
1b:da:85:50:0d:a9:ad:45:31:a2:26:84:99:34:ed:
84:93:09:b0:2f:3d:f1:9c:92:1c:ef:74:15:78:62:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:13:6D:EE:E9:65:0D:6D:98:6F:04:28:A0:48:F6:5D:E3:F1:AD
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:0a:95:76:b5:7e:7a:8f:0e:d9:fa:96:2a:19:09:08:ae:
ea:ac:d7:93:1f:0d:10:b7:ae:18:41:c2:49:39:1a:2d:59:8a:
b2:c4:78:3b:11:13:c2:c3:43:4c:36:48:8d:ea:44:8f:74:64:
3f:da:dc:27:b0:3b:84:1c:66:19:52:cd:78:90:a2:b5:ff:6a:
32:4e:50:ee:9b:99:98:eb:ab:96:5b:1e:db:18:c6:68:c4:22:
c9:08:d2:c4:01:8e:51:02:00:c1:e0:0e:23:78:5d:a0:55:5c:
fa:f0:82:68:38:35:df:fc:a8:ce:7f:62:89:34:7a:1f:36:0c:
46:08:22:f0:87:9b:c6:08:bb:79:15:2c:a1:c5:c5:6f:46:77:
bb:4d:b4:dc:e9:2a:64:78:41:18:f0:c6:be:00:c8:3b:9b:3d:
a0:7f:f1:c8:6d:6d:69:02:0c:db:a2:a7:19:52:3c:63:ae:c4:
cc:0e:47:a0:60:02:d7:d5:dc:c8:e8:2e:e5:0a:33:92:f7:22:
e2:42:22:03:a7:ba:3c:c4:2e:5a:b1:28:1c:c1:96:ef:bb:ad:
5f:56:4e:c3:61:66:ee:84:b8:6c:b6:9c:26:4e:44:96:e3:a6:
d6:f1:c4:dd:f4:33:9f:89:39:1b:b5:bb:35:1e:24:33:16:89:
f0:12:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:01 2025 by rpki-client