Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: PsVk5Dq6jxcfhqFQIVE0yiC7oNKsBMdkv9As976QwU8=
Subject key identifier: 32:2F:6A:CD:39:C9:5C:35:76:7F:DC:0B:35:60:10:B5:91:D0:A7:54
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019872CF191C94DFA86985C9469B67F200F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 12BB
Signing time: Mon 04 Aug 2025 02:00:31 +0000
Manifest this update: Mon 04 Aug 2025 02:00:31 +0000
Manifest next update: Tue 05 Aug 2025 02:00:31 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: TeI66vGdwxrD+xViEeOGHkVScCVP3rkBrfsDO2zuQaI=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:19:1c:94:df:a8:69:85:c9:46:9b:67:f2:00:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Aug 4 02:00:31 2025 GMT
Not After : Aug 5 02:00:31 2025 GMT
Subject: CN=322f6acd39c95c35767fdc0b356010b591d0a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:4e:6f:5a:87:60:4b:91:14:1a:4d:30:6e:
8e:f6:4c:dd:e1:8f:f7:c7:5c:2a:5a:52:e3:50:4e:
d9:1d:65:14:84:d2:f4:52:62:1b:9a:c2:cf:62:57:
98:2a:e7:4a:24:e8:20:f4:36:e3:55:a4:73:90:4b:
ca:9d:a9:71:71:8f:a6:41:49:70:75:d0:ad:5d:2f:
d3:d8:6e:33:a4:d8:0d:73:1b:12:9b:a9:6a:44:4c:
be:38:da:ee:44:12:bc:19:82:09:bb:b7:e4:f4:5f:
74:2e:4f:e8:2e:f8:90:23:1e:88:3c:8b:65:73:7b:
96:00:63:48:3b:0b:dd:29:74:b1:b5:ae:2d:9e:e0:
ff:95:ca:9b:63:d8:f1:c8:12:01:a6:3e:6e:ae:7f:
c5:e3:db:86:a8:54:21:1d:fd:ee:9a:1c:8f:3a:ad:
e3:7f:7f:fa:00:ee:1b:18:8e:d8:2f:a0:f9:11:1a:
42:9e:5c:bb:38:72:85:2d:5b:45:60:d3:5f:e6:b9:
54:93:d3:e8:81:ac:4b:09:ae:09:5b:a8:29:b1:71:
88:50:1e:25:f6:8b:f8:ea:c3:0b:00:72:05:9f:dd:
66:49:ed:a5:91:87:c7:8e:fe:07:01:36:76:00:50:
31:e5:1a:f0:37:11:61:73:8e:31:87:a9:7f:a4:d3:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2F:6A:CD:39:C9:5C:35:76:7F:DC:0B:35:60:10:B5:91:D0:A7:54
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e2:1c:28:56:cf:a4:57:9d:b0:cc:3a:c6:e1:44:db:87:9c:
22:79:05:a3:fa:55:25:e5:cb:25:32:2f:e1:f5:18:64:45:58:
3c:30:48:54:36:bc:d1:a0:3b:75:43:1b:36:f5:c6:f0:2c:fb:
d3:e0:e1:63:38:ae:dc:7c:36:25:31:bc:77:5c:59:a8:2c:e6:
4e:70:bb:07:bc:87:84:7d:68:05:25:5b:90:34:b0:fc:3a:19:
4b:bc:cd:72:05:82:8f:b5:00:c8:9b:75:24:38:08:f3:c5:57:
50:69:d6:30:ea:d0:5d:41:22:ae:0a:59:a2:34:7d:0d:3a:83:
00:63:05:b6:31:f0:9e:0b:e0:a4:1c:3f:c1:4d:c2:19:de:58:
f1:49:4b:95:b5:a4:09:07:7d:ad:c5:f0:2f:4f:4c:f0:60:1c:
be:b3:50:80:d0:41:23:d0:2e:cf:bd:bc:6a:da:f0:8e:6e:2f:
c9:ff:24:3d:34:d5:61:58:b0:3a:14:43:7f:c4:70:6a:9a:23:
d5:b5:49:bb:15:27:c7:be:d3:69:28:75:c9:8f:59:40:16:21:
c5:07:95:3a:b3:94:a4:5c:89:f3:0d:13:a2:e1:5e:77:88:07:
09:e6:b7:f5:05:82:96:57:3d:ce:1d:c0:ff:39:ef:74:b7:7b:
3a:6b:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:22 2025 by rpki-client