Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: Uq1Z6QuUFTtZ70MQF1KMFVLZUmEIe486i8HdQR0S5tw=
Subject key identifier: D6:A4:BC:6C:A2:58:11:F4:E3:7C:22:C9:7E:52:ED:AA:17:AD:FE:0E
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01976929A296D04F908EDA161231C63DCE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 12:00:25 +0000
Manifest this update: Fri 13 Jun 2025 12:00:25 +0000
Manifest next update: Sat 14 Jun 2025 12:00:25 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: MjYE7h1k5YolueZZ+qrLtYikXqxhkxdPoSunL28F8VQ=)
2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a2:96:d0:4f:90:8e:da:16:12:31:c6:3d:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jun 13 12:00:25 2025 GMT
Not After : Jun 14 12:00:25 2025 GMT
Subject: CN=d6a4bc6ca25811f4e37c22c97e52edaa17adfe0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:6a:7d:35:12:f1:ca:c1:9c:50:68:5d:63:
ee:8c:e8:bc:ab:7d:b5:57:0a:30:db:e0:43:3f:44:
05:ba:fb:9a:17:de:04:fe:a6:63:05:db:9c:db:8e:
b4:c1:d5:36:4a:5e:e4:90:7c:05:75:1a:02:65:dc:
ce:1f:4f:b9:0e:84:e9:49:11:6f:e3:27:71:c9:fa:
83:28:4e:6f:45:f4:75:9a:e6:b6:47:7a:d4:85:22:
2f:8f:95:b7:b5:d3:05:d8:1e:e2:a8:0b:b2:37:27:
31:b7:b9:03:d8:54:e0:c7:95:52:5c:b2:5a:18:bc:
0d:ef:93:fe:da:73:e0:ed:1d:72:2e:59:38:de:1a:
d4:8c:78:65:c3:00:49:13:b7:e9:f7:c6:b8:0d:78:
c3:11:1a:56:93:f1:b1:ca:15:c7:cb:95:a1:f9:12:
9a:98:53:96:52:1f:4a:db:cc:8f:72:f5:4f:9d:13:
bb:b0:36:1f:86:c3:a6:40:50:27:00:40:d7:48:05:
c1:34:69:88:9e:56:78:49:d1:3e:6a:0d:3c:61:29:
53:2a:10:2e:a9:89:1e:ea:8e:cf:7e:1b:ad:c4:c5:
41:cb:41:9d:22:b3:4d:38:17:a4:3e:eb:e2:37:92:
61:4b:13:3f:a9:7b:3f:6f:bf:3f:c3:a6:d0:36:50:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:BC:6C:A2:58:11:F4:E3:7C:22:C9:7E:52:ED:AA:17:AD:FE:0E
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:71:df:87:5b:58:b6:ed:0c:62:f9:8d:c7:6b:04:e6:f0:57:
19:fc:95:d0:37:d5:a2:53:08:52:d7:e4:67:b3:06:74:c4:dd:
4c:b9:93:38:cb:a2:c9:d3:ef:49:40:9b:73:da:f2:0e:65:df:
f1:b2:29:a8:3b:c4:97:28:80:91:73:e3:0a:e8:dc:07:e4:7c:
a2:d3:6c:35:fb:bd:3b:b1:4b:a7:0e:9a:d9:c8:3d:fd:66:fb:
36:4e:eb:b1:a4:36:95:d6:ed:31:41:17:dd:5e:48:5a:a7:01:
bb:0d:e8:f8:da:60:c4:5a:c2:65:f8:2a:f8:25:fe:8c:7a:ca:
c8:e8:28:a8:29:14:9e:ec:aa:31:77:01:99:41:05:29:88:7c:
7c:65:62:29:17:21:1c:37:f9:c3:01:ee:de:27:38:e8:ce:9f:
bc:f4:a3:52:53:c3:f4:f4:e0:f3:e4:30:ca:fd:ef:3c:21:4e:
b2:a8:22:22:84:59:39:51:08:8b:a0:37:32:d3:74:05:ea:76:
20:44:e8:87:6d:0a:b6:83:bd:9d:16:70:0d:8b:b5:d7:69:73:
e6:14:15:23:0e:20:d0:e9:02:70:c3:ac:7c:a8:be:63:0b:fb:
a1:45:22:b6:8c:f0:a7:e6:c6:84:ab:d1:a8:05:9d:1b:19:84:
f1:f8:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:57 2025 by rpki-client