Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: H8bUz5TLBmKDjMm+07sIUi7+rTxJ1gJqGKqfpJdMRUo=
Subject key identifier: D2:E5:FB:1E:E3:C5:19:13:C1:4E:5D:2F:76:E9:1D:1E:0D:E9:86:BC
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 01984A77A5FD69A227FF1878ACBF361DCC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 1541
Signing time: Sun 27 Jul 2025 06:00:11 +0000
Manifest this update: Sun 27 Jul 2025 06:00:11 +0000
Manifest next update: Mon 28 Jul 2025 06:00:11 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: SeKZseH00IrR6dN64OffK1w8tY2OCv4Z4+yLRrxrIDs=)
2: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (hash: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a5:fd:69:a2:27:ff:18:78:ac:bf:36:1d:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Jul 27 06:00:11 2025 GMT
Not After : Jul 28 06:00:11 2025 GMT
Subject: CN=d2e5fb1ee3c51913c14e5d2f76e91d1e0de986bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:83:ed:c4:ed:e1:ae:c6:27:c1:55:91:9c:
3c:1c:2e:87:a9:b9:4f:d0:19:2a:e6:fd:6c:3a:be:
a9:39:d6:53:2b:65:30:25:ad:15:4a:8f:7c:80:c0:
e4:80:6c:7a:25:bb:f1:e0:ea:bb:ff:78:12:5e:b1:
48:1e:fa:5c:33:f5:6d:43:89:d3:5d:7c:c3:2b:5e:
45:bc:5c:39:40:b4:72:3f:7a:e0:d7:4f:56:4a:dd:
59:12:d4:78:68:15:8c:ea:83:94:57:b0:08:2b:2d:
0f:f3:02:e2:0c:2f:bc:3e:60:50:fd:a9:2f:d4:b5:
53:62:a3:67:9b:d2:bf:67:dd:51:ad:dd:08:30:bf:
74:6c:2b:69:bb:f6:dc:d5:5d:fa:74:51:6c:69:f8:
1f:96:27:27:91:5c:3d:86:68:8b:8c:57:c2:c5:d6:
28:6a:94:85:83:fd:0f:2f:3a:09:34:a4:ad:0c:fd:
95:7a:90:40:57:96:49:62:16:96:53:5d:27:79:9f:
7e:f1:d2:0b:90:79:e0:2f:ea:40:09:84:48:e1:39:
11:46:b7:08:e0:f5:86:8f:81:58:b9:3f:2c:db:73:
6e:33:68:59:4a:2f:b0:9e:7b:6c:8a:73:00:0c:47:
2f:ce:f6:a9:6d:27:da:2c:34:30:88:fc:76:74:87:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:FB:1E:E3:C5:19:13:C1:4E:5D:2F:76:E9:1D:1E:0D:E9:86:BC
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d4:cb:e8:fe:22:a9:30:e2:35:6a:ff:99:a2:42:3c:aa:dd:
bd:e4:8b:43:3a:d6:31:b9:06:73:37:12:62:e6:a9:79:28:15:
86:b7:11:c8:0d:a2:cb:59:09:48:a6:b2:7e:e8:dd:21:9c:55:
06:26:46:5f:69:02:e2:43:0b:ca:35:e4:30:f0:69:53:21:58:
14:d6:ce:4f:f1:49:fb:86:13:0f:55:b4:5d:e5:1b:f8:7f:2b:
b0:24:ba:42:14:df:20:f4:48:bf:dc:70:82:ac:b8:85:1d:98:
08:86:d0:04:7c:7a:cd:fa:c0:84:0a:9e:f7:81:eb:20:25:f3:
bb:97:a9:e9:4c:11:08:c9:63:56:7a:2d:da:fb:ec:68:48:51:
3a:7a:1f:44:83:7b:18:7f:91:7b:bd:df:a2:3e:9d:37:78:55:
15:6f:cd:6c:9c:41:e2:10:1a:97:18:21:6b:72:2b:5d:90:3d:
4e:dc:33:20:89:1e:d8:28:4f:4e:a0:98:ae:78:e6:44:37:48:
ed:a4:e7:67:9e:d6:67:a0:e5:29:c3:6e:3d:d3:c6:cf:03:50:
56:b5:2d:7f:12:4d:f8:4f:9d:26:9e:80:4c:ff:af:ee:44:02:
62:42:43:28:6d:67:eb:a3:c1:38:45:9e:fe:a8:1e:85:60:07:
a4:c9:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:19 2025 by rpki-client