Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: sG9r8lO6ArSRVyFdH5/f6WYc7D1uMANPbNZSWJGsWGw=
Subject key identifier: 57:84:DC:2C:8E:B9:51:4C:29:88:DF:6F:06:F8:3F:50:52:BA:9C:40
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01976EBE55A5BA9B9816BCEB18C3B3E80FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 14:00:56 +0000
Manifest this update: Sat 14 Jun 2025 14:00:56 +0000
Manifest next update: Sun 15 Jun 2025 14:00:56 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: rBLpi9GC80eMvmfiD8gsRDweEPIaLTD7F6uW04YAvIQ=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:55:a5:ba:9b:98:16:bc:eb:18:c3:b3:e8:0f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jun 14 14:00:56 2025 GMT
Not After : Jun 15 14:00:56 2025 GMT
Subject: CN=5784dc2c8eb9514c2988df6f06f83f5052ba9c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:e2:59:b1:ea:31:30:b6:3c:2a:00:15:9c:
48:f7:ad:f6:6d:f8:cd:96:9b:0f:4a:0e:c0:97:40:
29:1d:3e:d0:68:38:12:78:da:00:1a:d2:87:40:3e:
0f:d9:5d:fb:af:f5:a3:47:bf:64:37:4a:70:7b:e3:
f8:d8:f5:35:93:9b:87:53:3f:e9:2d:28:5b:69:21:
3b:7c:fa:ac:91:e7:79:29:73:b3:a0:71:15:16:2d:
44:cc:77:a0:04:16:f0:c4:db:bc:3e:5c:63:03:0c:
76:c5:b0:d7:d4:1d:77:88:2f:51:fa:71:59:c5:6c:
c1:ed:b1:02:a2:a5:6d:28:ed:3f:c9:bf:cc:a6:be:
3a:fa:d2:b3:11:7b:14:3a:f6:98:5c:e5:20:cf:a9:
ea:a9:bd:95:17:74:92:40:f1:7b:02:80:d4:62:b7:
49:8b:83:de:7a:b6:12:b9:7c:ee:56:12:46:5c:cd:
55:49:b5:e7:4c:f8:5a:fc:7d:3d:41:2e:e1:65:09:
6f:8b:e8:78:58:47:3f:5f:ae:bb:b9:dd:18:9b:21:
02:a5:34:9b:2f:6f:26:81:9f:6f:d6:6c:9a:b3:d1:
60:96:32:14:bb:f4:f9:ad:bb:f6:62:1b:0d:7c:15:
f6:c3:e1:6b:e9:d5:83:87:94:78:3f:e6:07:1d:b8:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:DC:2C:8E:B9:51:4C:29:88:DF:6F:06:F8:3F:50:52:BA:9C:40
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b8:6e:61:3f:39:3f:21:5f:e7:28:b9:f9:da:df:8a:f3:e9:
d4:ed:17:47:8c:d0:8f:ee:2e:65:f6:13:f1:28:e0:4d:ad:e2:
8b:ed:c9:d6:dd:ed:2e:b5:4f:0d:00:97:72:70:b5:ce:ad:75:
35:3b:cd:5f:bd:48:35:68:a9:ef:58:f3:a1:58:10:5f:0b:77:
2e:3b:36:23:4d:50:6a:46:d9:d5:37:bf:7d:22:61:68:e5:fd:
8b:bc:2e:21:af:1d:69:28:15:8e:35:e4:2a:31:5c:66:76:b0:
8e:08:bb:fd:e8:48:80:18:44:34:b4:76:c9:6b:77:d3:c6:97:
4d:ee:ab:39:96:8e:ec:fd:84:b0:6c:f0:ca:ea:67:43:45:c0:
9b:63:e4:6f:b4:9d:2a:99:f2:ce:94:21:b8:d6:d9:58:a5:4c:
d7:a8:d4:78:4e:ab:fe:1b:fe:25:26:f5:f7:c2:0a:74:e6:3c:
d3:ae:d4:a7:6f:d0:25:25:1f:6f:7b:52:9f:d9:ad:6e:9b:d1:
89:9e:a0:f0:79:c4:b7:0b:7e:15:0f:71:d8:9a:f3:05:70:10:
4d:e2:f1:72:b9:98:fc:93:14:97:aa:08:e9:9c:48:3a:0e:0a:
b9:7f:2e:bb:77:cb:c8:c5:4f:9e:69:81:04:33:9b:2b:77:b5:
2f:f4:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:43:12 2025 by rpki-client