Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: zCJxy14Y5eykZg6rhJ8zn9bEsJ8ObnpwhFEabRuJzX8=
Subject key identifier: 54:D5:29:75:90:CB:43:68:95:3C:F8:20:47:7B:EE:99:2C:17:38:57
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01983CF337E10289EB4C5817B130D59D15E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 15FA
Signing time: Thu 24 Jul 2025 15:00:29 +0000
Manifest this update: Thu 24 Jul 2025 15:00:29 +0000
Manifest next update: Fri 25 Jul 2025 15:00:29 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: pQ9QGw7033Yutr6B/r/5swE9onOYxb7UyVIxrQ9awEM=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f3:37:e1:02:89:eb:4c:58:17:b1:30:d5:9d:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Jul 24 15:00:29 2025 GMT
Not After : Jul 25 15:00:29 2025 GMT
Subject: CN=54d5297590cb4368953cf820477bee992c173857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:e2:7d:d0:30:cc:2d:73:54:33:6e:b4:27:
1a:f9:22:7b:f4:dd:ca:e3:63:52:03:0b:1d:f6:7f:
1b:27:6b:98:8a:cd:f1:71:7e:7d:89:e8:41:74:0a:
bf:b8:69:b1:64:6e:2e:7f:2e:fe:90:47:47:a0:fb:
2a:02:d1:1b:43:19:ed:3e:b8:20:1f:32:9e:55:54:
0a:e4:c8:d4:58:ba:27:75:fe:56:ce:c6:ce:3a:31:
0a:08:5d:8f:96:d2:02:6c:2b:b0:4f:f2:06:86:d7:
7b:0e:3f:84:b1:27:0e:c5:87:84:c9:66:30:3b:73:
b4:70:7d:24:1c:6f:4c:3f:57:e3:8e:c8:6c:34:17:
26:8f:68:fe:3f:47:42:e4:27:51:d9:c8:bb:0d:f1:
33:4e:97:45:3f:3a:c8:be:b5:aa:a8:6d:ae:ab:d5:
ba:17:03:44:fd:8e:cd:39:ed:a1:04:52:a6:47:d4:
8c:a8:e8:19:c5:40:cd:da:1e:12:f0:67:da:b7:a9:
40:02:12:ee:b0:56:a4:41:95:9c:a1:e3:ee:bc:d8:
df:41:6e:2f:02:f8:01:a9:31:cc:87:3c:35:ee:2a:
8f:a6:da:d9:93:f5:35:86:9a:c5:86:6a:77:14:50:
d3:a7:4a:a3:24:d2:1d:b2:d3:7b:99:31:8a:46:a4:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:29:75:90:CB:43:68:95:3C:F8:20:47:7B:EE:99:2C:17:38:57
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1e:f8:4d:a6:c5:3f:99:80:87:58:0e:7c:c9:f3:cf:10:4e:
18:a1:ff:66:91:c8:0a:ba:44:27:5d:da:17:92:cb:2c:ac:5b:
7a:4d:80:00:47:d7:a1:cd:ff:fe:cd:7f:b1:6a:7f:f6:8a:64:
f6:70:56:f1:8c:9f:4d:af:24:a3:fb:63:6c:67:b7:06:31:ab:
95:86:2e:a2:bf:cd:55:05:1b:e9:f1:01:9b:28:d1:c8:36:04:
2b:f3:d8:8c:92:14:48:67:45:68:02:a1:9d:ab:c2:9b:f1:dd:
5a:9c:66:fc:62:07:1f:2b:2d:33:bb:dc:64:e2:6f:63:c4:6c:
20:7a:d1:e1:df:20:87:43:53:a7:ec:a0:5b:12:45:bb:6e:93:
db:e3:da:06:f7:23:f3:d7:7d:d1:74:92:67:8d:7a:82:f0:ee:
15:aa:7d:45:56:aa:70:fb:7f:33:03:ad:39:ea:c2:98:67:a1:
94:8b:6e:f1:59:e7:45:c2:0f:53:1e:03:df:e2:d8:78:fb:f4:
0f:09:62:01:1e:04:a3:11:67:8e:d6:33:f6:7d:64:64:18:e6:
28:fc:9e:7e:ab:fd:93:b1:3d:b4:70:da:4b:e9:c7:44:ed:00:
5d:bb:16:06:66:b3:c5:6e:2d:85:a1:2a:3a:f2:a4:45:62:57:
4c:eb:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:30 2025 by rpki-client