Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: b4NPYUkMcVJBvrL3DH19CckPXOFVp8PebkfFgCzyBTo=
Subject key identifier: 34:D0:0F:A5:7D:67:21:1B:76:FA:63:00:F5:EF:FF:6C:34:BD:3B:94
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 01976BF48EA28177FCB39AF771B91FCF072B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 01:01:18 +0000
Manifest this update: Sat 14 Jun 2025 01:01:18 +0000
Manifest next update: Sun 15 Jun 2025 01:01:18 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: kOm5NYxky4HkAQWFJzN0inIu4y0GqcUxQhnNKFxl9hU=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:8e:a2:81:77:fc:b3:9a:f7:71:b9:1f:cf:07:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jun 14 01:01:18 2025 GMT
Not After : Jun 15 01:01:18 2025 GMT
Subject: CN=34d00fa57d67211b76fa6300f5efff6c34bd3b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:34:98:55:1c:bc:e2:50:6b:e0:0c:38:f3:50:
de:2d:e7:74:75:9f:d7:c9:16:62:3a:e9:90:58:42:
75:2f:91:32:74:fa:bf:dd:65:96:1b:6d:1d:bd:47:
0d:ab:28:5e:a4:9d:ca:36:4b:37:ab:60:c7:78:aa:
12:99:7a:81:2f:1f:be:8d:ac:37:b4:55:27:b6:cd:
13:13:90:77:99:26:77:2e:e4:ab:6d:44:72:59:0e:
14:25:8f:5a:2e:bb:8b:d7:50:93:e3:ba:43:99:af:
08:94:5f:5e:27:ba:bc:66:1e:85:9e:c4:ed:da:67:
47:3e:70:2f:c9:a1:a1:1d:4f:93:f3:22:32:df:4b:
7d:23:1a:85:74:17:b8:ab:6c:78:9b:ae:5e:5c:f0:
b8:2a:8a:0d:54:65:0a:e5:86:cf:c8:70:1b:bf:89:
4e:5f:24:fc:d5:5b:98:b8:88:f8:57:75:1a:67:98:
8e:b4:b8:e5:4e:c8:ea:6c:28:75:c3:76:3e:7a:b0:
ff:53:ca:44:f7:d4:66:d8:dd:47:da:89:6d:bf:83:
25:59:4f:a6:4e:86:5f:52:19:cd:9a:9c:77:e7:4c:
ac:5d:42:48:18:0b:dc:d8:ce:67:8b:a9:b2:67:9f:
fe:01:75:5b:84:94:92:95:48:ca:68:38:d7:a9:3e:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D0:0F:A5:7D:67:21:1B:76:FA:63:00:F5:EF:FF:6C:34:BD:3B:94
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b0:a7:b2:4b:e3:f5:ad:e1:f2:f2:55:c5:b8:b7:0f:71:f4:
ad:bb:26:04:6b:ed:07:e4:bd:a4:1e:2d:4a:b8:6d:46:fa:6d:
e0:85:62:6e:51:36:6a:a5:be:b7:db:07:38:3c:0a:50:10:e9:
f9:d4:fa:42:53:c1:df:d3:a5:b3:90:b5:a0:b4:58:13:2f:42:
51:ca:a6:65:29:08:42:a4:e9:59:0e:98:5e:af:f4:87:16:5e:
ba:52:8c:bf:56:eb:8b:00:be:de:9c:e0:d4:77:af:4d:a2:a1:
1d:ce:da:3c:8d:23:31:45:00:c2:9b:08:26:f5:4f:4c:0c:de:
60:d5:b6:e6:72:f7:96:2e:ed:ef:a2:31:48:08:98:b9:d6:de:
28:f1:2d:f0:11:27:e0:f8:77:1b:7b:55:09:96:60:d3:1b:6e:
2c:90:ac:d8:95:24:fc:3f:25:2e:d1:07:0f:24:cd:64:a6:0d:
15:2a:77:ea:c2:9d:a9:e8:a9:eb:de:00:48:0e:10:4f:61:2d:
dc:e8:ad:60:61:00:41:74:dc:0c:46:83:54:58:01:c4:8b:b7:
60:02:a5:d7:87:e9:a8:5a:f9:df:f0:ff:37:7c:03:dc:41:56:
cf:eb:cd:d9:15:cf:6d:49:7b:95:fe:d2:d9:7a:4c:f7:56:5e:
9e:8f:05:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:19 2025 by rpki-client