Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: 85p4Ga8sQPQZfL6jeJyviHX36KCVfUAlNqZCVjydJCE=
Subject key identifier: 43:AB:7C:1A:9C:78:37:B0:98:69:9C:E3:B0:81:75:C9:F7:0C:81:0D
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 0198CCB9C734AD077B72AE48A7C66908570B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1647
Signing time: Thu 21 Aug 2025 13:03:03 +0000
Manifest this update: Thu 21 Aug 2025 13:03:03 +0000
Manifest next update: Fri 22 Aug 2025 13:03:03 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: dKb2V8AR1ti8A1xl52cRKyZ7Yq/W+QUz/ixE3jmIlbU=)
2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:b9:c7:34:ad:07:7b:72:ae:48:a7:c6:69:08:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Aug 21 13:03:03 2025 GMT
Not After : Aug 22 13:03:03 2025 GMT
Subject: CN=43ab7c1a9c7837b098699ce3b08175c9f70c810d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:5b:a0:50:23:82:77:52:be:2b:bb:bf:90:
1a:1e:98:54:16:eb:45:22:de:b1:12:46:61:53:49:
64:4c:3e:72:f7:00:e7:c4:65:bd:fb:78:78:f5:e0:
5f:dc:57:28:4e:d9:81:f3:43:22:42:42:69:8d:3d:
32:8b:da:ba:26:7c:36:8b:74:45:6d:a2:cf:eb:7a:
43:89:85:bf:d4:d8:2d:47:cc:f6:4c:d3:1c:e7:44:
7f:36:f0:62:93:c4:2f:ae:84:a5:ba:57:fb:ad:80:
27:5d:a1:fa:c6:5f:ed:ed:82:2d:76:e9:a6:3a:c3:
65:3d:b0:36:a4:a9:f4:c3:32:3d:3a:d7:d2:c4:b1:
d8:8c:b4:f1:2a:6d:26:03:fd:01:8a:86:de:ba:9b:
50:89:ac:49:fc:82:20:2c:97:ee:10:f4:5d:52:26:
6b:5b:f1:34:3d:9a:c4:94:af:e9:8e:dc:c8:9e:66:
29:f3:a9:ce:c8:d0:60:80:63:03:c3:11:5f:ba:5f:
c1:a8:7f:9f:b5:3e:3f:6d:ba:86:e5:d8:91:89:7a:
22:74:f7:62:15:b0:94:a6:2f:56:f3:11:51:f2:28:
a2:ad:9d:cc:dd:2b:03:62:7d:70:38:db:a8:a9:f9:
fc:c4:dc:25:87:5c:59:57:12:a0:de:d4:1d:2e:9d:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:7C:1A:9C:78:37:B0:98:69:9C:E3:B0:81:75:C9:F7:0C:81:0D
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6a:c2:47:13:d8:df:db:fc:d9:8e:7f:39:07:29:e2:75:83:
4b:fc:34:ee:18:8b:ec:d2:88:ae:8f:92:f4:da:39:9d:a5:c3:
3f:c9:22:36:98:64:6c:f4:9a:3b:10:cd:90:57:f9:34:fa:79:
9d:cc:7c:82:b4:a8:67:b0:92:4b:00:3c:b5:fb:e7:47:93:a1:
73:46:15:fe:9a:19:32:89:42:7b:65:aa:91:59:48:f7:0d:15:
f0:a2:c8:23:0c:15:21:6e:03:d3:f3:28:5a:27:ff:8e:b4:8c:
77:bb:4b:c5:87:8a:b8:73:d5:4c:9b:0b:61:92:e1:ce:06:5c:
ec:92:4a:f6:04:55:66:ff:69:54:bc:d3:a6:b2:5c:25:c1:87:
d7:65:32:0b:81:9e:05:1a:70:79:7d:45:e8:11:19:a8:af:4c:
71:ba:77:f2:0a:0b:6b:3d:96:5b:ac:67:f9:cb:90:9d:30:99:
a5:e1:c7:12:96:56:c6:b9:e3:ca:aa:ef:b0:ac:21:93:cc:5d:
31:1f:65:7c:b2:f2:ca:b2:d2:c4:9e:dc:e2:4e:08:f7:7c:8e:
fc:b8:80:7a:c6:30:05:4c:80:83:c6:30:e6:42:c2:52:9b:fd:
ab:2d:54:91:95:4e:a5:cb:f9:8c:75:22:4c:eb:fc:83:e4:6b:
69:ec:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:24:27 2025 by rpki-client