Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: rfJCiUBhdTV6cfBz4yChRBCqBk+MyKMjolCOGs+8GcU=
Subject key identifier: 25:B6:FD:7F:69:3A:D8:E9:A5:0E:0B:71:7B:4D:30:50:79:E8:71:60
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 01984A40C36DF2CD26A3B5FF1BDCCE5933A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 12A6
Signing time: Sun 27 Jul 2025 05:00:15 +0000
Manifest this update: Sun 27 Jul 2025 05:00:15 +0000
Manifest next update: Mon 28 Jul 2025 05:00:15 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: 0pzah/C4T3zM/IRfkBnktGYO50SyTgBJYw9nn1s2/R4=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c3:6d:f2:cd:26:a3:b5:ff:1b:dc:ce:59:33:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Jul 27 05:00:15 2025 GMT
Not After : Jul 28 05:00:15 2025 GMT
Subject: CN=25b6fd7f693ad8e9a50e0b717b4d305079e87160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:cd:fa:01:15:ee:23:a4:28:e6:04:fa:65:
ff:45:0e:9b:65:cc:3a:93:a9:4b:3c:8e:5c:82:9e:
db:50:fb:b2:93:26:26:4c:eb:19:7b:f2:97:db:22:
48:0e:c6:fe:b8:ea:16:1c:d7:7b:6f:d0:d0:eb:d8:
5c:b4:1f:4b:55:9a:1b:8d:13:42:32:30:cf:5d:b5:
c6:af:1c:a6:d6:18:9b:f9:e5:13:bb:ae:a8:4d:de:
5f:73:4e:dd:d7:4e:f7:b5:33:46:08:2d:63:d5:b5:
11:59:45:ef:9a:99:e7:cc:74:40:74:d1:31:7e:ff:
43:0e:77:06:cb:9d:1b:4d:cf:e7:e1:22:a0:89:12:
27:69:da:50:2e:42:04:81:bb:a0:4a:1b:d3:1c:24:
ca:cb:4a:85:3c:43:57:81:f9:2d:cf:8f:0d:75:99:
73:30:79:f5:f5:f0:c4:f8:13:dd:4a:96:da:89:18:
2c:c6:0a:c7:2f:ee:be:f1:33:d2:59:e9:95:46:f8:
18:bc:b6:a9:e3:c4:f1:f6:d0:8c:e1:13:1e:dd:65:
e8:b3:e4:99:f5:97:09:d8:a9:b4:e6:18:9d:db:d8:
ce:a1:e6:6a:f1:9a:79:3d:c9:0d:60:17:b8:01:36:
aa:20:99:e3:e4:db:ac:f1:32:f6:d6:bf:64:00:e8:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:FD:7F:69:3A:D8:E9:A5:0E:0B:71:7B:4D:30:50:79:E8:71:60
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:48:c3:f8:d2:fb:81:09:b8:66:34:8f:91:ee:52:59:ff:
22:83:0e:0e:0e:d4:b4:a7:f4:35:3a:a8:de:f4:4a:bf:57:53:
e9:5b:4e:0b:f1:69:12:28:87:0d:d7:a1:ba:f0:74:1e:4f:df:
02:a8:30:a2:9a:c5:a6:5c:e4:d6:6a:9a:0d:9a:d1:70:48:54:
44:d2:cb:96:1b:d4:ed:0c:01:da:cc:b5:50:d6:a7:a4:35:c9:
4c:99:33:97:7b:c8:3c:45:83:ba:46:90:3e:c0:56:d4:73:ea:
31:3b:75:ec:ab:a8:3f:e6:5d:6e:39:76:95:7e:21:f8:b5:f0:
4f:90:9b:4f:f1:f1:3c:3b:be:9e:d7:a7:e7:27:7a:59:05:48:
83:4b:f8:82:66:3c:29:a5:b5:7e:5f:97:8a:a8:f4:83:15:4e:
c1:19:df:bd:a0:e8:e1:34:0e:85:88:d9:7e:64:9a:6c:44:a9:
43:75:88:e8:76:71:3f:fe:97:78:86:40:0f:f1:76:5e:6d:d8:
05:3b:22:7e:b9:66:e6:27:e3:b2:eb:e2:0b:e8:c6:47:15:cb:
02:3a:41:f5:f0:28:4d:a4:fb:d6:d3:3a:97:49:e5:f9:02:d8:
ff:06:c4:22:13:fe:a7:f7:c8:9c:af:a7:61:e0:41:80:e1:c7:
cb:ca:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:54 2025 by rpki-client