Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: akhyvq0FOkyydAIwNYuWRXT8diW3KRyrD8AHBGnu4HM=
Subject key identifier: 58:68:63:11:C9:21:A4:D9:EE:55:86:5B:3C:14:7D:52:11:0E:1B:2F
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 01987C40247E927DCBA1DCB7C6E90CA7B49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 22:00:34 +0000
Manifest this update: Tue 05 Aug 2025 22:00:34 +0000
Manifest next update: Wed 06 Aug 2025 22:00:34 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: u6KqOpGlhGaRB9JsBvJRt5pPJa6Yvq3+KO8q14WfqX4=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:24:7e:92:7d:cb:a1:dc:b7:c6:e9:0c:a7:b4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Aug 5 22:00:34 2025 GMT
Not After : Aug 6 22:00:34 2025 GMT
Subject: CN=58686311c921a4d9ee55865b3c147d52110e1b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:30:3e:18:b7:19:4a:11:19:e4:b7:7c:32:
88:56:55:50:28:65:68:00:1f:a5:6d:40:01:25:77:
f2:8d:62:13:c9:d9:2c:cf:0d:3b:a8:75:67:06:84:
6c:66:56:17:8e:d1:1a:a9:74:a4:b2:ee:45:17:34:
9b:16:75:f1:67:5c:79:2c:ed:ea:26:c6:ed:93:41:
3b:8f:28:a3:a8:7c:e2:f2:45:2b:0a:c9:59:b6:22:
43:3e:e9:4e:f8:cf:e8:4d:a9:19:5d:40:ea:a2:af:
92:1b:8f:67:2c:1b:8a:b1:90:f4:7c:5f:9f:b4:b8:
22:09:a4:53:f8:b8:bf:bd:61:28:e6:50:62:65:b6:
26:ee:db:17:2e:b7:a4:cc:d6:e3:65:57:a6:69:46:
8e:5d:a8:9c:4d:50:a1:00:22:fc:30:06:d0:70:60:
6f:79:e1:d7:84:96:68:ba:e2:1d:93:e1:0e:83:0b:
b5:43:43:84:dc:46:26:e2:8f:39:dc:16:e9:a0:d3:
a3:6d:e3:75:ae:c7:5c:85:57:8b:5a:66:c5:e6:39:
3e:f9:f7:87:87:09:55:b7:bf:bf:e1:98:4b:47:71:
98:62:56:af:8a:fe:66:59:ca:37:69:fd:ac:e4:9f:
a4:68:1f:f3:69:7e:94:ae:45:ff:69:bb:d0:b3:75:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:63:11:C9:21:A4:D9:EE:55:86:5B:3C:14:7D:52:11:0E:1B:2F
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:0a:bd:63:4e:92:1d:11:6f:ff:bb:01:b9:85:34:37:9f:
8a:a4:7e:7e:32:b5:df:8b:76:ed:51:89:39:eb:8a:c0:09:61:
61:7a:e9:3e:7a:a4:4d:fe:af:4f:ad:1a:e6:69:3c:41:ca:90:
41:cb:f1:6c:df:e3:a1:29:3b:31:a0:3f:3e:ab:ff:8c:60:11:
aa:b1:49:df:ee:17:c0:4a:07:c3:0f:0f:3b:29:82:15:3a:6a:
17:79:20:0a:b3:4c:99:26:3b:e9:47:3c:8a:d2:5d:65:93:11:
e7:dd:25:bd:9c:8d:5d:b1:05:9a:7c:0b:ad:1c:3b:b6:ac:4a:
f5:17:ed:12:45:e9:ac:89:de:9a:2b:19:a5:f9:7a:31:b2:69:
c4:5a:97:42:7a:95:fc:b2:c3:9a:62:58:a3:30:24:28:28:b3:
cf:35:1f:47:bd:57:3e:94:a0:68:23:73:82:a8:40:ae:97:b3:
e5:d7:80:4d:e2:a8:83:17:1c:d6:74:06:07:5c:92:b0:7c:80:
81:5a:2d:0e:8b:29:0f:6c:63:07:ae:dc:4e:8c:14:37:16:fe:
fb:9e:50:ac:19:50:04:f0:99:3e:21:04:98:b4:08:c6:bb:ea:
70:4e:5f:f7:a7:d1:3a:10:53:6f:f9:82:bb:e2:bb:b5:00:29:
ee:b8:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:35 2025 by rpki-client