Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: Gfl7iE6R/QStYc8XzQtBX5Nh6sbjopLJoZufTc1i8YQ=
Subject key identifier: 78:86:C8:41:93:30:9B:2D:34:F3:45:1B:33:5C:04:2B:E6:E3:66:92
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 01974967E82F9AF49F622B60AF1020E37F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 1221
Signing time: Sat 07 Jun 2025 08:00:35 +0000
Manifest this update: Sat 07 Jun 2025 08:00:35 +0000
Manifest next update: Sun 08 Jun 2025 08:00:35 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: UhLi1Nx0q8fwBcf8KvVl4qA8nNbX8mfMdtg7pzPRDXg=)
2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:e8:2f:9a:f4:9f:62:2b:60:af:10:20:e3:7f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Jun 7 08:00:35 2025 GMT
Not After : Jun 8 08:00:35 2025 GMT
Subject: CN=7886c84193309b2d34f3451b335c042be6e36692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:d7:47:c9:fa:f9:6f:11:b9:b4:c5:44:0c:
c3:9c:df:19:d0:db:7f:26:d4:c0:3a:a8:8f:76:27:
37:24:9c:b7:b4:52:42:d9:c0:d6:23:3f:62:eb:67:
e3:41:86:04:f1:2c:a2:bf:81:28:b3:07:f3:a7:e3:
4b:56:88:c5:35:0d:5f:74:17:f3:ce:c6:20:db:3d:
d4:c6:0c:fb:59:d1:5f:ec:3f:9c:fa:8c:cc:a0:8c:
6f:ea:fd:9e:03:9e:33:6f:6d:71:bd:3c:86:04:f9:
53:ff:0a:8a:4f:5c:78:0f:5d:04:89:08:3c:aa:4e:
1c:63:28:4f:84:5c:f9:62:e3:d6:3a:19:9d:50:4e:
02:e6:72:3d:64:59:26:88:b7:74:80:9f:c4:07:c0:
c4:72:7d:b1:7e:10:86:88:c3:91:77:47:24:3b:63:
3b:ca:17:3d:25:84:9d:e9:30:28:44:9e:98:1c:5f:
f4:ef:36:77:ff:d3:07:24:67:b9:c5:93:98:8b:c1:
01:f7:f6:6e:ed:70:4e:7b:65:55:f7:0b:f1:c6:cc:
59:70:af:ff:56:df:3a:fd:e9:a0:6b:0b:a8:34:e4:
53:b6:8b:46:ed:4d:52:62:bb:d8:22:7a:9d:92:b4:
a5:c4:19:f0:b4:87:c5:bb:c7:e4:30:e7:9b:86:49:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:C8:41:93:30:9B:2D:34:F3:45:1B:33:5C:04:2B:E6:E3:66:92
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a7:97:7b:7d:c5:15:39:2d:0e:59:df:c5:af:74:cc:35:7b:
c7:ce:16:1f:ff:52:27:01:84:1a:d5:c7:c1:98:16:84:1c:a7:
da:1e:e2:f3:57:26:f1:29:5c:65:44:93:f4:73:5d:87:ce:5a:
4f:42:29:c6:34:f6:20:dd:de:c8:81:16:98:f8:2f:ec:ff:67:
92:72:f9:f6:41:4d:24:3c:06:1e:2b:09:37:e4:94:94:5b:c3:
53:08:2e:b7:b5:82:49:fa:63:35:b8:ef:d1:70:65:36:ac:8e:
f3:4d:e1:af:d7:4f:e8:d8:f9:8d:39:8f:f9:6e:fe:92:81:cd:
5c:6e:e7:56:72:84:b2:e5:9f:6a:f7:ad:5b:17:9d:3c:90:69:
33:29:03:0e:db:bb:b7:11:ae:3d:af:1b:50:dc:5c:4c:fb:82:
35:36:1d:00:51:2f:b4:21:7e:12:63:85:f8:27:17:30:2c:f9:
91:13:7e:fe:5c:67:ec:70:4d:62:01:8a:5e:46:58:58:d2:89:
ff:0a:bd:f6:e8:2e:1b:68:95:08:05:f1:48:8d:a7:b1:05:a6:
9e:08:48:d8:91:76:5e:29:79:44:93:81:6f:25:06:82:3a:37:
81:fd:08:bd:40:e0:d7:ed:c1:2e:fb:0a:26:d1:fb:50:a6:a5:
54:a8:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:54:39 2025 by rpki-client