Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: VCyS+NIrxmevxuWTGqPd/xewECszkTeGbQu8PiC8Ygk=
Subject key identifier: 5C:DD:5C:5C:21:31:35:03:AF:7F:FD:25:0C:7A:26:FA:D5:D3:D1:95
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019767A966DF2E0853D50F6CDF7C28D64F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0E48
Signing time: Fri 13 Jun 2025 05:00:44 +0000
Manifest this update: Fri 13 Jun 2025 05:00:44 +0000
Manifest next update: Sat 14 Jun 2025 05:00:44 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: LcR0nhnNsZjZg9XM5il3aXQmCTsJRdugFpu6tI1IfHI=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:a9:66:df:2e:08:53:d5:0f:6c:df:7c:28:d6:4f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jun 13 05:00:44 2025 GMT
Not After : Jun 14 05:00:44 2025 GMT
Subject: CN=5cdd5c5c21313503af7ffd250c7a26fad5d3d195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:d2:74:5e:d4:aa:11:40:23:d3:e8:08:d1:
ea:22:80:c3:4b:26:89:1e:17:72:d3:43:20:44:f9:
43:7a:7c:24:af:4f:27:63:04:03:ad:69:fc:d6:f6:
0c:3b:62:88:b7:29:25:c7:6d:21:40:80:0a:fd:67:
2c:2b:72:3c:c7:bd:39:d8:93:ad:32:e9:f6:c8:0e:
18:b4:93:83:88:ec:de:6b:a2:07:b1:b0:92:4f:e8:
d9:d8:f9:bd:1c:c1:a8:2a:57:3a:99:25:3e:55:bc:
a2:47:57:33:2a:92:0c:fa:3b:76:88:d0:3f:45:71:
f7:1b:41:85:1b:48:37:ef:59:0f:45:3e:63:42:23:
81:a4:02:7f:f0:ce:8e:66:68:d0:40:d3:f2:ff:27:
48:04:d9:e5:6f:56:f1:e6:db:a9:a7:af:56:2f:61:
73:9d:93:46:ed:06:20:69:8e:8a:c7:c7:0d:a6:b4:
6f:26:0f:64:76:5a:84:f4:3b:41:a8:ca:de:40:73:
e9:ab:d2:8c:41:df:d3:3d:d0:b2:68:2c:aa:ad:fe:
77:e5:9b:9f:84:54:59:11:f3:53:8d:4c:0a:d5:31:
8f:15:e6:13:59:e3:98:47:84:f3:0e:60:19:70:b6:
8f:d6:b8:84:8d:88:31:14:ec:dc:e0:aa:59:21:4c:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:5C:5C:21:31:35:03:AF:7F:FD:25:0C:7A:26:FA:D5:D3:D1:95
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:e8:96:e1:92:85:b5:b2:c5:b5:d4:99:06:5c:69:b5:90:
4d:ae:76:cb:b3:3c:cc:1c:d1:b0:5f:6c:be:6c:0a:ce:7b:52:
a2:ce:63:4b:b8:74:b2:49:c4:d1:de:7b:cd:8e:28:5f:1f:1b:
32:c7:ea:35:47:cb:0c:89:78:86:78:ca:95:c2:3b:0b:48:a3:
13:54:30:8e:5e:2f:c0:e3:86:66:b5:8f:6d:a9:62:fb:44:7e:
bd:ec:75:96:0a:f1:9c:48:63:e1:23:f4:54:4f:33:5b:2c:2a:
4c:30:a5:97:63:56:b5:a2:4a:da:ef:75:3d:e0:65:31:c9:f3:
3c:45:98:c8:06:fe:a9:2b:00:97:a2:70:ac:28:24:e4:e2:5c:
28:26:8a:f5:2c:0c:15:59:8c:66:8d:35:6a:24:59:ef:86:b3:
0e:43:47:d7:67:33:6d:86:47:ad:73:c6:7f:e6:26:46:cc:96:
3f:65:e7:4f:aa:aa:7c:a6:3e:67:4f:ed:cf:6f:02:e6:f7:63:
f4:36:db:05:31:3f:d5:dc:28:83:bf:12:18:14:b0:43:20:d2:
43:cc:ae:29:8d:ca:89:32:e5:12:ed:47:3f:5b:43:b1:d0:93:
86:4f:13:68:43:22:7c:d7:61:05:7d:9f:10:31:17:66:90:7c:
e2:56:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:14:27 2025 by rpki-client