Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: x0QD9vQ1jHf3hBfO7Jpipq9C7w5h4/Z0H36Bc7yGcr4=
Subject key identifier: BC:44:96:C4:B6:A6:A6:65:2B:6D:06:98:FD:AD:36:5C:62:2D:0D:C4
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019882E79CA9A1E50A7F9D39B1356D836B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 05:01:13 +0000
Manifest this update: Thu 07 Aug 2025 05:01:13 +0000
Manifest next update: Fri 08 Aug 2025 05:01:13 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: mmAXJMJ6tRwFU/aZ2TmWFUrMX7GhG+9UvnhCqgP6Dno=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:9c:a9:a1:e5:0a:7f:9d:39:b1:35:6d:83:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Aug 7 05:01:13 2025 GMT
Not After : Aug 8 05:01:13 2025 GMT
Subject: CN=bc4496c4b6a6a6652b6d0698fdad365c622d0dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:9e:04:6a:6d:00:b7:e3:54:ba:36:ae:cb:
16:f9:dc:63:58:01:75:fc:00:b5:6e:fc:9d:92:8d:
a4:25:08:57:b2:b2:a7:8a:d6:45:d2:e8:7f:9a:a3:
0d:cb:a2:65:98:b3:42:4e:b5:88:b7:49:2b:2f:9e:
f2:44:6a:db:88:c9:b7:76:06:e1:2f:5d:96:a4:aa:
e4:c7:f9:2d:26:79:2b:36:3f:54:d7:13:2f:3f:32:
e3:7b:67:f8:70:04:d7:de:83:82:d4:06:34:f5:c2:
b8:80:77:0d:33:31:af:d5:90:14:63:fe:df:e3:74:
60:c8:f5:54:97:91:1e:96:78:8b:9e:e4:bd:58:72:
35:2c:61:04:57:63:71:02:70:d0:df:9e:b0:aa:8b:
aa:bc:0a:34:7c:c9:ca:3f:b7:23:03:05:71:3b:77:
a6:00:81:fa:d9:c3:40:cf:95:2e:0b:dd:bd:c4:21:
4b:03:c8:cd:f6:bf:9c:b8:58:41:52:5e:a9:3a:ae:
77:1a:26:76:dc:d1:ff:36:5c:d0:82:8f:cd:d2:23:
9e:86:60:15:e8:9d:14:e3:e6:96:55:9c:39:d3:08:
f1:4e:39:f5:3f:0e:31:d3:23:0e:14:bb:91:c7:a1:
c9:13:5f:5f:38:dd:dd:c7:17:a2:91:94:0f:b2:99:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:96:C4:B6:A6:A6:65:2B:6D:06:98:FD:AD:36:5C:62:2D:0D:C4
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f7:9c:37:f6:42:86:6b:69:ee:02:fd:bd:27:db:f9:58:0a:
2f:73:cd:67:59:a6:4f:d8:3a:6b:61:89:94:a6:8b:6f:37:d4:
9c:83:7a:c8:9f:59:c9:cd:5a:6e:cf:8c:08:86:e2:71:65:13:
19:75:fa:f2:45:d8:24:8c:a5:da:de:bb:e0:23:fc:54:25:eb:
08:83:ba:c5:92:cb:e5:55:a9:83:30:d8:8a:b8:b4:18:83:2c:
86:a8:c7:55:2b:75:ce:98:f6:dc:9a:42:93:b7:6d:40:bc:f7:
80:6f:c3:6c:67:23:44:f6:ac:9e:78:11:48:a6:f0:69:31:84:
30:8c:68:6a:e3:cd:ba:01:4b:30:da:de:7e:3e:bf:9e:df:62:
ef:7e:45:00:8f:31:e5:d4:ad:a7:4f:96:b1:64:8d:70:3f:17:
2e:5d:48:30:7b:b7:37:f2:66:d5:46:6a:76:8e:af:88:99:ce:
d4:60:92:87:1f:69:7e:2a:ad:a8:0f:ba:59:9d:e5:be:55:a0:
71:78:db:ec:c2:94:d7:d6:31:e0:22:8e:8b:d3:f4:98:f0:34:
cf:9b:9c:9d:f2:be:14:3e:e2:aa:32:11:a8:6e:77:3f:a8:f0:
bb:57:29:d4:b2:2b:a5:0c:21:be:a1:10:79:a2:b3:6f:42:e4:
98:d2:90:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:34 2025 by rpki-client