Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: VWFO0bvIezpAI93hoRpVn3Af3i4c/OghmrFHcIJvvEU=
Subject key identifier: ED:4D:47:46:47:B1:F5:18:3B:75:02:60:26:DF:19:D1:7F:0E:3D:66
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01984AE5EEE09A56C1FF5D6124485680D20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:39 +0000
Manifest this update: Sun 27 Jul 2025 08:00:39 +0000
Manifest next update: Mon 28 Jul 2025 08:00:39 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: IGiUr2L8CtfOm7seguG/zmTv0413zVxxloZJCPQxQNU=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ee:e0:9a:56:c1:ff:5d:61:24:48:56:80:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jul 27 08:00:39 2025 GMT
Not After : Jul 28 08:00:39 2025 GMT
Subject: CN=ed4d474647b1f5183b75026026df19d17f0e3d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:52:5e:cd:81:f7:15:5c:ed:6d:40:bb:7a:
a8:70:89:c2:cc:87:39:3a:2e:ad:d5:f0:70:29:9d:
ed:90:29:87:69:eb:77:ca:2b:0e:aa:a0:b6:8a:c8:
55:52:e4:32:e9:c3:6e:5e:8c:b0:85:b0:08:73:df:
07:bb:de:cd:97:c6:cc:f2:82:bc:ac:63:05:4d:a7:
71:e3:bc:e1:7e:36:0a:4d:67:4a:e5:e0:64:03:db:
c7:8f:18:66:22:c7:a8:4d:9a:82:2e:e1:25:08:23:
8a:6b:da:e3:1e:8c:9d:97:c5:3e:ba:72:27:41:4b:
29:cf:ce:1b:fe:e8:13:b6:a3:ad:50:93:a5:26:54:
ef:46:60:4e:26:70:67:56:07:e5:a8:ae:23:36:3c:
b4:5f:fc:07:bf:d0:4b:8b:73:30:4e:a6:bd:1d:d8:
81:3f:ad:1a:ba:7d:b6:c0:9f:0b:37:5d:09:03:2f:
6e:0f:8a:05:ab:b4:58:d2:38:99:f4:64:5b:22:3d:
7f:58:35:95:22:66:2f:2e:d6:34:46:e1:76:c3:80:
59:06:17:47:b2:d1:e2:3d:02:bd:33:85:e5:ca:0d:
7b:3f:8d:de:d1:86:7e:97:ff:5e:ef:67:3f:8c:e3:
06:13:54:6c:65:a2:cc:9a:c8:8d:68:3d:90:b3:4b:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:47:46:47:B1:F5:18:3B:75:02:60:26:DF:19:D1:7F:0E:3D:66
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1c:40:d2:67:7c:5f:69:51:70:7a:38:52:04:25:28:65:6e:
99:f1:97:2c:09:ec:ef:8c:ae:c5:e0:e5:63:6c:19:dc:19:fc:
90:dd:88:20:91:0f:ba:ef:e2:58:2b:51:9e:2b:29:a0:2f:1c:
61:3b:fd:47:23:af:a9:a7:dd:cf:9c:e2:b0:f5:1a:a2:29:0b:
2f:e4:a3:f3:91:d6:42:22:4a:54:51:11:5d:1b:9f:77:a0:18:
e3:ee:08:77:7c:98:a3:0a:0f:cf:af:b9:b0:f6:69:4a:85:41:
63:b2:59:4c:57:a0:52:87:0e:57:77:f1:bb:16:48:8b:c3:6a:
53:39:db:87:8d:d9:3c:9f:17:f4:24:e7:68:be:b9:79:96:89:
f6:51:74:4d:97:7b:60:d1:ee:27:d9:ea:d6:c2:34:90:82:6f:
a1:af:e5:0a:10:13:a6:db:26:2f:bd:fa:4e:33:62:bc:7c:5c:
f2:b0:e8:bc:d9:7f:fa:01:f4:ee:f8:58:76:f4:4a:37:54:20:
67:fd:6b:41:59:cc:ed:27:72:16:cd:df:21:e1:cc:00:fe:81:
ce:54:79:00:35:55:79:72:7d:e7:f2:7a:3a:98:72:31:40:14:
86:00:db:71:d2:10:43:6a:6b:41:b9:2b:c4:de:02:59:77:74:
c7:39:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:21:33 2025 by rpki-client