Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: 9JRKmT0UBrlduy2XW4nmPG15+ga8NRVyAaPsOY3M/yk=
Subject key identifier: 1B:D1:5B:BE:16:A6:29:E7:0B:11:38:3E:73:E4:4D:DC:CA:9B:6D:5B
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01974A0D063985940E9A25D2C2E99DFAFA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:56 +0000
Manifest this update: Sat 07 Jun 2025 11:00:56 +0000
Manifest next update: Sun 08 Jun 2025 11:00:56 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: h1z6sLS20uZk9l2RozBXwFFwKgvYtJqvj9ptDbB/+pU=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:06:39:85:94:0e:9a:25:d2:c2:e9:9d:fa:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jun 7 11:00:56 2025 GMT
Not After : Jun 8 11:00:56 2025 GMT
Subject: CN=1bd15bbe16a629e70b11383e73e44ddcca9b6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:3f:27:7b:01:94:20:bc:8f:23:be:a1:4f:
af:a3:9b:2a:0a:8f:09:10:07:ac:6c:d1:b6:a3:ac:
35:94:6e:c9:c2:06:a5:d0:7c:42:79:e6:cf:62:7d:
61:7f:a9:46:40:ff:fd:c0:a0:4a:d2:90:1a:3e:56:
35:a4:7b:2a:af:8b:76:66:32:0b:8c:3d:1a:28:14:
de:e2:58:d2:96:01:87:f9:e8:28:d2:a4:09:59:ea:
0f:cb:6e:21:42:b5:85:e2:57:9f:47:3f:b5:3e:da:
ab:95:d6:95:0a:d3:f9:b8:9d:40:2e:06:f9:1d:9c:
39:cf:dc:53:8f:f5:ae:6f:86:4a:24:c4:a2:c7:a4:
ff:97:25:a7:5d:bc:9d:b3:bc:44:02:ce:90:4b:4c:
fe:2d:20:98:db:0e:47:37:a3:85:6e:9b:55:c5:a1:
d6:f9:b1:ab:f4:57:9a:98:02:8e:af:08:8b:71:ea:
e7:e4:1f:13:1e:d3:9e:0b:e6:0b:dc:54:74:34:13:
a7:31:75:ef:8d:9e:8c:3e:44:d3:fa:19:1e:dc:73:
ae:ce:ef:71:99:77:f0:14:06:d0:51:58:94:50:27:
67:31:1f:fc:31:86:d4:f2:94:1b:3c:05:97:ae:f0:
9c:63:8b:24:a1:cd:99:a0:5b:9d:6c:ec:48:5c:52:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D1:5B:BE:16:A6:29:E7:0B:11:38:3E:73:E4:4D:DC:CA:9B:6D:5B
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:fc:75:8f:57:b8:9e:80:5d:fe:0d:f5:3c:8a:de:51:27:
5b:7a:9b:a7:62:fc:e0:f0:5c:3b:a1:17:db:34:3f:d7:75:1a:
ba:35:d9:a2:50:93:fd:f4:0f:c7:4f:02:f3:c0:58:8c:3b:a0:
9d:9a:94:f2:72:41:6d:92:97:e9:11:98:54:8f:3c:57:a0:be:
3f:00:3c:af:0d:8e:60:f3:b7:de:2d:d5:83:26:68:43:29:ed:
21:ad:84:7a:80:78:00:97:47:6f:7c:48:88:7f:eb:49:80:b7:
c9:1c:2a:ac:df:d9:91:59:ab:23:4a:1d:f3:72:17:df:dc:ac:
04:05:d7:90:68:6e:2f:94:34:4b:2d:c6:67:1c:6e:f9:f7:60:
ac:3d:cc:11:25:fc:77:69:5f:54:77:02:6b:4e:b4:40:6c:bc:
c9:9f:c4:b2:6b:66:64:5b:00:fc:14:74:3d:a1:ac:06:88:64:
61:ae:e6:59:4b:f1:48:10:07:9b:88:e7:59:d8:7f:c0:7f:a0:
eb:09:5e:66:d5:e9:fb:bf:e1:cb:49:ff:2b:f3:73:78:5b:6b:
bf:0f:b3:53:39:77:05:67:a1:d2:76:e7:65:69:e2:32:d7:45:
65:a7:92:6f:5c:5f:7b:4b:e7:20:3b:cb:0c:67:5c:63:78:67:
6e:e7:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:57 2025 by rpki-client