Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: K4QhvuU1gqgJN3W9j6w+gB3jeaWw3zVFsKPw+Q7MKfE=
Subject key identifier: 3E:DC:C7:2C:F2:DE:E0:0F:B3:84:2B:D9:FE:4D:20:BE:83:B5:64:00
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 0197846AAD59FF0DFA45E62247A059F07D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0EB6
Signing time: Wed 18 Jun 2025 19:01:13 +0000
Manifest this update: Wed 18 Jun 2025 19:01:13 +0000
Manifest next update: Thu 19 Jun 2025 19:01:13 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: Ecj49fWGl+EPbnmKDNOLqvD8A5Y+2udO0btBCGrtr4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:6a:ad:59:ff:0d:fa:45:e6:22:47:a0:59:f0:7d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jun 18 19:01:13 2025 GMT
Not After : Jun 19 19:01:13 2025 GMT
Subject: CN=3edcc72cf2dee00fb3842bd9fe4d20be83b56400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:30:73:05:2c:b8:ed:1c:61:76:95:c5:85:
f4:2b:7a:fa:53:69:ac:95:13:cc:57:4a:52:34:cd:
66:ad:1d:9d:9d:dc:7e:fd:01:32:7b:71:f1:ee:a2:
ea:21:bf:21:1a:50:72:54:84:29:e8:77:b6:00:8d:
1b:0c:60:c4:99:f0:ae:aa:8a:90:00:7c:fd:66:92:
41:d6:56:67:5e:84:3d:c1:95:f7:78:51:1d:70:b4:
ae:5c:3c:0f:1f:bf:7f:f3:b8:6a:bf:17:40:cc:73:
17:ea:bf:54:b3:c8:da:a9:e6:a4:e0:ac:53:e6:66:
4b:4d:da:b9:b8:d9:2c:9f:96:98:8c:87:66:1c:3b:
c3:52:0a:99:65:8c:47:23:41:9b:28:d8:3d:7b:03:
af:4b:25:fc:8f:d9:e2:88:1d:6d:d6:26:e3:0f:4c:
c1:4c:97:9b:28:4c:2a:49:71:1b:11:1d:cc:8c:1c:
c2:ed:e3:9c:be:f4:04:e2:46:3c:63:2e:7e:fb:c2:
d1:09:bc:0a:90:a7:b5:18:ec:35:ab:11:64:92:fb:
24:43:bf:a8:f4:b4:49:b9:1c:a6:f9:13:eb:2a:6e:
73:84:34:6f:ba:c2:e0:1a:11:c8:e5:f8:2d:c4:13:
12:95:62:85:f0:b0:de:b4:5d:65:00:2d:62:1d:ed:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DC:C7:2C:F2:DE:E0:0F:B3:84:2B:D9:FE:4D:20:BE:83:B5:64:00
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9c:70:3b:58:59:f4:00:db:dc:af:c6:e5:97:96:2f:09:6d:
27:5f:d5:73:e4:6d:64:8b:0e:7d:6c:0c:80:2e:5f:8f:13:7a:
4f:f2:5f:6c:9f:31:f8:36:4b:4e:fc:48:e3:a4:d9:58:8a:62:
2e:5b:29:78:46:d4:bd:12:66:4d:ac:27:83:d8:1b:4e:09:05:
44:73:64:4a:20:e7:4d:dd:f6:9f:1b:b0:f1:f9:45:85:80:9c:
c5:ef:3a:cd:7c:3b:5b:a3:9b:d1:63:93:78:0d:3d:1d:d3:ff:
0b:c9:61:8f:15:89:62:2e:c4:90:2f:90:84:e4:8b:48:8e:71:
76:2e:93:ae:b9:da:13:8e:b3:a6:99:8d:1d:98:56:5c:8d:99:
1e:8b:11:78:f3:56:73:9b:ad:da:d7:d3:14:5c:e1:ef:9c:08:
28:cb:b4:62:59:00:7a:26:52:be:e2:1c:b2:4f:bf:f8:1e:9d:
c8:18:39:5f:d4:32:c8:06:6d:35:c7:c5:58:6b:52:88:a3:6c:
6d:56:5e:9a:d4:6e:78:bf:33:7e:f0:11:75:52:c0:a6:6c:db:
09:02:99:fc:b6:c0:a8:04:ac:39:f1:82:4f:90:8f:fa:26:d4:
82:7c:d3:87:9f:7a:e6:46:a1:23:75:17:06:e0:40:2a:ce:a2:
0c:4d:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:12:01 2025 by rpki-client