Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: 0uRo6Ll2uOXFFL9LMRmwi+G6KWXZQXmarRIhBVy7TEc=
Subject key identifier: 8D:23:4C:FD:FB:AF:1F:9F:56:0D:69:55:C2:DB:90:81:5B:5C:8A:F6
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019788B48B387D08B10A6B56A6DDA97A279A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0E24
Signing time: Thu 19 Jun 2025 15:00:22 +0000
Manifest this update: Thu 19 Jun 2025 15:00:22 +0000
Manifest next update: Fri 20 Jun 2025 15:00:22 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: OFfxm2MWgoWrjLMWXjA6NRzhLP1+gx52kmeNyi4w0K4=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b4:8b:38:7d:08:b1:0a:6b:56:a6:dd:a9:7a:27:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Jun 19 15:00:22 2025 GMT
Not After : Jun 20 15:00:22 2025 GMT
Subject: CN=8d234cfdfbaf1f9f560d6955c2db90815b5c8af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:6e:c6:62:33:30:48:57:39:e2:98:0d:0e:
b2:84:0e:cb:16:dc:7d:17:3e:e3:db:1f:87:b3:04:
97:7c:b0:3a:38:ad:1a:86:5b:05:1e:22:ef:4e:b7:
58:3a:b8:e2:93:a5:a0:29:f8:00:9a:89:12:c5:ef:
5d:9f:f0:dc:f6:f9:b3:a9:3c:a5:63:43:6d:93:61:
b7:a2:44:ac:88:89:91:47:66:02:23:9c:bb:d8:44:
da:d3:4b:b6:be:f1:2e:cf:bf:b1:33:d5:64:03:b2:
fd:8c:c6:11:c1:9f:01:3e:c7:38:60:9d:4d:f4:e7:
49:5c:94:84:82:2a:3b:97:48:ad:c9:b7:f2:14:82:
a3:87:61:c7:74:c9:56:a7:43:bb:df:ee:74:77:a2:
2b:64:8f:e6:ac:eb:01:76:0e:67:c1:5e:75:cd:b5:
11:1b:39:0c:51:31:a5:0b:28:0a:3a:dd:2a:d6:d6:
42:ec:7f:1f:96:a7:01:b0:c0:91:0e:ca:7b:7d:32:
bc:e6:33:aa:3d:45:d6:49:f9:c9:0f:68:ba:85:9c:
d7:0e:46:96:31:8c:ef:3e:ea:79:2d:9d:f8:6a:03:
31:d3:19:eb:67:e7:05:02:c5:e5:1e:cc:81:e5:cb:
f5:aa:f9:4d:3d:65:89:b2:a6:67:98:03:c0:fe:7d:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:23:4C:FD:FB:AF:1F:9F:56:0D:69:55:C2:DB:90:81:5B:5C:8A:F6
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8a:4c:44:0d:d4:2e:fb:2e:e8:4e:5e:72:8e:de:bf:1e:30:
7f:55:c9:f3:ab:42:ee:7c:4b:3f:4f:f6:ea:a0:1a:fa:72:df:
7e:17:1e:00:d1:3c:79:1d:11:20:c8:e4:7f:6b:d0:8f:02:94:
ea:a3:ff:61:fe:52:27:10:b8:51:d2:a8:88:6f:50:dc:89:ba:
fa:79:30:e1:64:80:74:bc:76:ff:aa:dd:df:2f:e0:a9:bf:2d:
cc:8c:ca:fe:c8:af:d6:40:73:d5:9c:73:99:97:71:c1:ef:ec:
e7:d5:a4:0c:c0:75:6f:ac:34:11:2e:d4:20:d3:b0:f1:92:eb:
40:fe:f9:92:8e:78:08:b6:77:b0:89:3d:1c:4e:dd:d7:26:88:
d9:7a:18:75:57:c1:37:1b:84:f9:0f:dd:fa:74:92:31:ec:de:
d5:ef:6f:a6:ca:0a:01:1b:d8:76:1b:76:ce:59:f4:42:9b:65:
4f:76:6f:07:41:4e:8b:05:16:78:5f:12:91:4a:ab:b1:e3:18:
f1:59:cc:2a:5f:0b:71:ea:33:12:95:07:5f:83:a3:b6:ee:ef:
da:c4:dc:7b:22:51:bf:80:e1:8a:2e:86:1d:86:e6:1d:6c:4e:
6e:71:70:d7:7b:4c:fe:35:2d:16:97:3e:e4:b5:df:fb:95:9b:
41:50:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:16:49 2025 by rpki-client