Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: R+a3mECMArtOEhnpkjLh+mXwjL71CBdBYAddXFkhYZA=
Subject key identifier: F5:BB:DB:60:28:E0:32:67:0C:B4:FA:A8:80:85:B4:9C:F1:CE:10:BF
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01975FEFCA4C87F9275705109743A1B8DD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0E44
Signing time: Wed 11 Jun 2025 17:00:39 +0000
Manifest this update: Wed 11 Jun 2025 17:00:39 +0000
Manifest next update: Thu 12 Jun 2025 17:00:39 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: WHbezi7CfykwK1o7qCaM85OR/NcEPKaHONwhgLOM0EA=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:ca:4c:87:f9:27:57:05:10:97:43:a1:b8:dd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jun 11 17:00:39 2025 GMT
Not After : Jun 12 17:00:39 2025 GMT
Subject: CN=f5bbdb6028e032670cb4faa88085b49cf1ce10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:f3:98:9c:17:85:81:b1:c4:d3:17:04:d5:
e5:cb:9d:ba:70:3c:8c:79:04:19:52:59:5c:27:d6:
5f:b1:cc:5f:c4:3b:33:a3:22:56:e6:67:91:5f:18:
d1:6e:f1:c2:00:69:d3:c3:e9:49:85:ad:93:7a:86:
a2:24:1e:45:a0:1e:7f:a6:47:1d:db:04:3c:a2:c3:
a9:7c:40:64:8e:ac:1c:1a:18:9f:7b:e6:c1:a6:1c:
c8:a3:4a:fd:84:78:1d:a4:07:f9:1a:aa:6b:87:45:
05:4d:3a:d3:d3:83:b3:ee:24:ef:00:b2:b6:bb:81:
82:89:cc:a5:ea:53:5a:a6:af:76:36:4d:d6:30:af:
12:c9:92:a8:70:04:64:a1:08:1c:02:0a:d2:f2:8b:
f5:e3:7c:19:f8:51:8c:23:e2:cf:c0:68:77:a4:e4:
86:07:9f:ef:11:f6:fd:6b:2c:2b:c7:ab:3b:ad:45:
52:02:a2:09:60:df:cd:71:8b:1d:d7:18:43:7a:76:
11:51:bd:9c:76:7e:27:be:ff:26:40:4b:8f:38:d3:
38:ee:08:a1:92:20:9f:00:f1:fb:ed:79:59:9e:80:
ed:49:5b:a3:32:22:f7:09:9b:c2:88:ba:8f:6c:88:
ee:1b:f5:b5:ef:b9:3c:3f:7a:74:e9:da:f7:79:78:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:DB:60:28:E0:32:67:0C:B4:FA:A8:80:85:B4:9C:F1:CE:10:BF
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6d:6d:3c:27:b0:d8:24:89:99:61:01:d2:d4:22:b9:b6:de:
af:8a:1e:cf:7d:cb:4e:83:cb:a2:c0:17:07:f2:ad:a0:1f:d6:
3a:35:62:5c:f3:0b:b8:da:97:6f:32:a3:66:c5:7d:1b:a4:f9:
c6:35:bd:2c:92:95:60:75:63:76:ca:34:55:e3:18:3a:de:f8:
6b:12:dd:65:03:05:e1:45:72:b8:18:dc:86:2f:c0:ad:f6:62:
0a:9a:c0:3f:71:4a:f2:82:eb:4f:77:8b:e1:d3:61:8a:b8:81:
50:33:2d:4a:b7:73:46:47:eb:f2:83:e3:f3:b9:62:25:2f:64:
9d:a4:5a:17:bd:3b:f9:e8:d9:84:d6:d2:dc:5d:7c:a4:be:fb:
c3:f7:01:7c:cd:0d:d0:a8:60:8a:c1:34:73:e1:90:23:b3:6a:
54:e8:6a:1a:1d:4e:c9:db:4f:66:da:a5:40:dc:26:d2:1c:fa:
7b:a3:de:0f:14:aa:a2:56:55:c4:5e:32:e8:59:bd:95:66:9e:
ae:e7:39:5d:a1:bf:55:89:19:4a:43:83:db:73:99:e6:09:93:
43:58:05:dd:61:77:3c:bf:02:2a:57:00:af:54:42:87:3b:e9:
dc:af:51:3c:dc:b1:c4:82:51:28:23:09:3f:d9:95:ab:e4:2b:
07:82:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:18:27 2025 by rpki-client