Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json)
Hash identifier: 8qVdjRxpZpvdLScYREmcMxiRJZ5bO4qiFkvLYoF9k0k=
Subject key identifier: 25:D2:A9:BF:14:27:57:89:26:E1:11:F8:7C:83:0F:23:CC:1C:8F:61
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 0198451A7C7DDBF706407DF9A524665DCBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
Manifest number: 11
Signing time: Sat 26 Jul 2025 05:00:20 +0000
Manifest this update: Sat 26 Jul 2025 05:00:20 +0000
Manifest next update: Sun 27 Jul 2025 05:00:20 +0000
Files and hashes: 1: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: Z51X3v8eFDes8sqFNne9kvNEpEKHUH3vxvoXszIEkDo=)
2: Wsal890lGBfSVCv5KTPQ4Iwb9Z8.roa (hash: 4sf4D+shg4PxizfTIk0m7V8aFTYIPfkSV1v67RUvT4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:7c:7d:db:f7:06:40:7d:f9:a5:24:66:5d:cb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Jul 26 05:00:20 2025 GMT
Not After : Jul 27 05:00:20 2025 GMT
Subject: CN=25d2a9bf1427578926e111f87c830f23cc1c8f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:81:53:c5:40:af:16:4f:07:f2:6c:11:08:
df:ad:d3:89:aa:00:77:34:d7:b4:a2:f0:95:6a:5e:
7c:52:cf:e8:42:fb:a8:27:48:09:05:59:3d:75:40:
0c:f2:7b:bb:b6:9d:ef:59:99:4d:57:3d:85:d0:9c:
c2:a2:be:13:db:e7:de:9d:ed:89:df:2d:14:30:05:
88:61:ee:68:df:8a:63:45:56:97:6c:ad:69:3b:ad:
1c:37:e4:db:49:40:0c:2a:3d:35:92:4e:8a:43:89:
02:d7:a1:75:5f:2d:9c:e7:0c:33:5b:60:f4:f4:c5:
ce:42:3f:e3:fa:86:84:f3:6d:c1:f5:8e:0c:ab:53:
08:a0:9b:cf:c3:78:d7:34:d1:3e:53:13:27:c0:6c:
88:e4:53:0e:98:58:c0:f6:dc:e0:01:38:ae:c1:16:
3b:20:f3:c2:bd:d8:21:9f:36:48:c2:de:c6:7f:f3:
bb:77:91:b8:ef:d8:89:ca:43:78:29:55:28:38:df:
1c:d6:11:95:58:2f:65:7f:27:aa:ac:bb:f1:9c:7f:
ce:26:10:d3:65:24:e6:76:74:02:50:5d:15:06:6a:
b3:48:b7:09:7d:ea:d5:f2:8f:10:51:58:a7:be:12:
52:20:92:c9:57:8f:21:ff:a6:a1:02:09:49:cb:16:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:A9:BF:14:27:57:89:26:E1:11:F8:7C:83:0F:23:CC:1C:8F:61
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2b:4e:d5:cc:3c:f7:7f:0c:1d:94:7a:2a:a5:6e:ba:55:21:
9a:8b:a4:ed:35:7d:2a:03:bf:68:01:18:55:4b:d2:63:e8:c0:
3d:0d:aa:2b:8a:b2:14:7e:8d:9d:6f:4a:3f:a4:f0:ea:c5:57:
85:7a:61:f6:b1:10:39:25:16:55:e7:4f:1a:6e:58:1d:9f:08:
2e:1c:ff:eb:2c:9a:ae:94:7b:a6:b3:c9:d3:4a:1f:7f:66:a4:
11:3c:d6:2d:86:19:01:7b:d5:1d:88:ae:67:fa:e2:d3:e7:b2:
e4:ba:1c:d7:26:44:7c:a3:b1:6a:f2:f5:d7:f1:50:8b:b1:8f:
c8:bc:ec:aa:19:84:fd:ee:78:66:28:47:e0:e3:48:a3:cb:24:
8e:b0:6d:66:6d:7c:1b:b9:6a:7a:15:cf:ba:93:d3:36:11:14:
ed:4e:65:9a:23:57:26:d6:1b:39:54:ab:3a:ee:36:85:95:49:
55:91:20:b6:b9:26:ca:cd:f6:56:33:7d:b8:93:e5:cc:4c:78:
5f:cc:ab:ee:89:f7:89:97:56:a6:56:77:71:19:f4:5b:ec:a3:
2c:b0:95:ea:48:c3:cc:03:a0:94:b7:45:05:6d:b0:1a:e0:7a:
cb:87:ee:67:5b:5c:4e:d9:12:45:cc:c0:85:31:15:5f:4c:0b:
42:53:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:16:41 2025 by rpki-client