Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: ysFj/Sg3ruSDGzrEmLMRtkRR229prp8vSzyULO1WeLk=
Subject key identifier: 1A:04:5A:99:FC:B6:4A:2F:65:C0:35:C0:9F:EA:3E:9B:6E:C1:70:F8
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 01976C2AF9F61D2416C4843D08957058C3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 1233
Signing time: Sat 14 Jun 2025 02:00:45 +0000
Manifest this update: Sat 14 Jun 2025 02:00:45 +0000
Manifest next update: Sun 15 Jun 2025 02:00:45 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: sO9UXJoe1SmMqa+dWLQBaAIrS8uDZvIC4I6CLkdljGQ=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:f9:f6:1d:24:16:c4:84:3d:08:95:70:58:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Jun 14 02:00:45 2025 GMT
Not After : Jun 15 02:00:45 2025 GMT
Subject: CN=1a045a99fcb64a2f65c035c09fea3e9b6ec170f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:9e:a4:9f:8c:b1:35:79:52:e5:67:c4:a4:
6e:4e:6f:46:aa:88:36:c0:46:b8:54:e2:3d:c6:40:
a0:60:f7:1b:77:48:80:d2:cf:63:7e:df:b8:ed:85:
98:76:9c:c3:c9:04:2f:26:24:dc:d4:3a:61:cb:9d:
3e:1c:8f:7b:1e:68:9c:42:48:d1:de:04:6b:60:59:
d8:e1:82:7d:26:aa:58:27:76:23:47:90:2e:3b:85:
ad:48:cd:a6:0f:4f:ca:23:b1:f7:6f:06:49:ec:8a:
ac:28:aa:4a:65:7a:81:bd:39:9f:6e:52:9e:30:a3:
db:9a:37:0b:16:26:d4:6d:a7:1a:4d:af:1a:63:29:
20:1c:b6:52:d2:60:58:ca:a7:5d:e8:88:ff:10:41:
1e:9a:29:a4:21:18:cc:5a:33:40:70:90:15:5d:56:
2c:12:4b:0c:6f:d9:ca:a8:78:01:17:6b:e5:d4:8d:
ac:26:2c:b7:e8:46:b0:9d:79:16:a1:70:36:63:77:
ca:9a:74:ea:95:f8:3e:03:e4:34:12:28:e3:0b:c5:
9f:b2:b8:93:3a:b5:32:bc:19:a1:b8:38:2f:c5:4f:
2e:04:6d:b9:f7:88:78:68:8f:6c:1d:0f:e4:b2:eb:
ed:8a:e8:31:f4:cc:38:2f:9b:37:15:e0:1a:e7:9e:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:04:5A:99:FC:B6:4A:2F:65:C0:35:C0:9F:EA:3E:9B:6E:C1:70:F8
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:86:62:58:ee:ac:c6:fc:89:cf:bc:b4:12:b7:55:d0:b2:a0:
11:25:9a:49:94:79:91:ab:c3:e5:ae:2a:ca:dc:6e:73:ce:1c:
3b:a6:76:ae:3a:e7:db:e4:a9:a5:be:c3:43:26:57:81:10:84:
25:35:d2:72:91:ef:47:d1:aa:70:86:5a:09:78:b8:2e:5a:c1:
57:c9:1b:3a:fd:38:3d:78:4a:b2:aa:06:4e:f5:6a:fe:92:04:
3e:6e:17:12:8d:cb:e5:d7:16:08:fc:69:ea:fd:cc:92:ca:68:
d3:b3:30:14:df:4f:a1:cf:38:15:30:6f:f6:83:f3:df:ba:97:
95:60:70:1f:4a:66:99:d8:74:46:3b:67:7c:b9:6a:7f:c3:eb:
cf:63:bb:5a:93:b5:93:21:35:9b:77:45:c8:a0:14:53:09:e3:
63:03:bc:b2:99:fe:e0:a2:85:b8:75:9f:61:e5:9d:ae:42:36:
34:52:17:13:c0:2d:46:76:a2:e4:49:ee:5d:58:f3:64:82:66:
1b:ba:f9:bc:46:4b:9b:b8:9a:ff:98:cc:01:48:9a:2d:bf:f4:
12:6c:92:d7:74:89:89:73:88:f8:06:c8:e9:b0:25:5d:ac:af:
4a:71:c4:12:45:02:07:e6:e8:ca:80:64:78:8f:ec:d1:ea:54:
d9:72:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:12 2025 by rpki-client