Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: oRs4tiSqp7nfrJxqxLyGwPfCNBsKanXxfg/ajalzKYs=
Subject key identifier: 20:96:CA:64:29:04:57:67:19:8F:65:9B:0D:02:B0:18:C5:BA:2E:27
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 019853E8DBD9D336F4D6230CDD469859BC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 0F64
Signing time: Tue 29 Jul 2025 02:00:26 +0000
Manifest this update: Tue 29 Jul 2025 02:00:26 +0000
Manifest next update: Wed 30 Jul 2025 02:00:26 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: bnsrJo8QE9m0zouARZXe3jOQfvAfpxCqztttJ4RYLl0=)
2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:db:d9:d3:36:f4:d6:23:0c:dd:46:98:59:bc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jul 29 02:00:26 2025 GMT
Not After : Jul 30 02:00:26 2025 GMT
Subject: CN=2096ca6429045767198f659b0d02b018c5ba2e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:e1:84:42:86:63:b4:30:2d:8a:da:e2:3a:
07:b9:43:50:b8:e1:91:08:db:49:83:63:96:c4:d3:
c0:17:2e:2c:2c:54:a2:0e:73:ec:f0:5c:10:94:ed:
2b:b8:06:4c:3a:06:e5:70:80:ea:5f:7b:8d:76:d3:
58:e2:17:2c:58:67:92:10:92:1b:cb:c2:e2:dc:7c:
6b:22:ea:ad:f4:a6:f8:c9:67:1c:66:5a:ac:ea:7f:
a0:8f:34:89:6e:5d:b4:aa:bf:18:40:3c:48:74:6c:
ce:51:d8:39:5e:66:8e:31:7e:7a:c8:98:54:e5:63:
7f:df:21:75:77:f0:87:80:27:79:fd:b0:01:78:46:
13:be:10:17:c2:e0:70:ea:7f:2f:7f:c1:03:cc:d5:
4c:0a:82:f8:f0:51:5d:85:6c:3a:43:38:7f:cc:1c:
03:4b:59:2d:28:28:be:fb:3f:6a:62:d2:36:e0:71:
9e:84:ec:bc:2c:cf:a2:02:fa:45:9b:16:87:ef:74:
fa:0b:2e:ec:33:e2:f4:dc:3c:e8:7c:df:be:79:75:
e1:a7:51:5c:91:43:97:bb:95:78:a5:51:08:87:b6:
e9:15:cc:92:97:5c:e2:d7:f9:73:de:2b:e8:04:fe:
c1:2a:12:52:42:58:56:1b:5a:d4:de:9b:c7:59:cc:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:CA:64:29:04:57:67:19:8F:65:9B:0D:02:B0:18:C5:BA:2E:27
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:33:b1:db:5f:59:7f:63:dd:31:d9:7b:d2:cb:23:98:82:01:
a0:bf:91:16:65:b1:5b:a8:b7:6b:05:90:97:2d:bb:d2:e5:b8:
c9:1d:23:6f:5a:43:30:78:c2:e2:75:0f:98:b9:e8:40:29:9f:
ad:6d:18:40:b9:8d:e9:b3:19:67:0f:ab:15:ea:8e:4f:10:95:
a4:91:7a:96:9a:ce:ec:94:cc:1d:b5:af:b9:b3:80:1f:ea:99:
71:67:61:80:63:18:fd:e4:b1:43:b1:54:ee:7b:18:58:2c:12:
e8:a3:80:8e:8e:21:fe:5f:bc:78:a6:90:54:42:1e:51:fb:96:
81:80:71:16:e2:85:88:5e:9e:87:0a:cb:f7:a6:20:c7:7e:e8:
bd:f8:03:dc:d8:e8:b4:3e:15:7a:86:a0:97:6e:55:14:ad:88:
ac:9b:45:d3:f1:91:83:b7:eb:08:fd:e8:bc:26:42:bc:97:7a:
11:cd:b2:76:71:48:69:68:7e:97:b7:34:91:32:6f:f1:ae:20:
44:44:fa:c6:e2:4b:77:8b:61:67:06:96:88:34:53:a0:6b:42:
da:5c:a5:a0:d2:ef:93:c8:98:9c:d5:1b:e6:1a:87:23:59:42:
47:93:94:d6:c0:e4:73:26:2c:47:fc:47:10:79:2d:5f:8f:45:
8d:05:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:51:42 2025 by rpki-client