Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: 667w3N5q+lmqfXYYKX8ssq2W6q03pDfyTtztSXMK/7Y=
Subject key identifier: E5:EA:13:18:6A:78:E6:19:D1:A7:F9:2A:29:08:D8:B8:E5:8E:98:36
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 0197D3CF2E5DCA84659751AC77981D3764DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 026C
Signing time: Fri 04 Jul 2025 05:00:59 +0000
Manifest this update: Fri 04 Jul 2025 05:00:59 +0000
Manifest next update: Sat 05 Jul 2025 05:00:59 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: rTVpinbN4EYhr+cQpxnA11owALWFKlkqcIeplzrMrIA=)
2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:cf:2e:5d:ca:84:65:97:51:ac:77:98:1d:37:64:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Jul 4 05:00:59 2025 GMT
Not After : Jul 5 05:00:59 2025 GMT
Subject: CN=e5ea13186a78e619d1a7f92a2908d8b8e58e9836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:d1:a3:28:9d:09:9f:ce:ae:e2:b1:3a:00:
9e:66:37:78:1e:0e:8b:dc:6f:58:73:4b:04:c4:3a:
64:72:37:b9:ee:d9:e4:20:5f:65:89:b9:df:49:c8:
0d:61:55:74:e2:f1:fb:7f:aa:ce:cc:62:45:37:31:
26:a8:c5:32:a9:aa:fe:f2:ef:40:51:1f:28:fb:98:
2d:c9:21:5a:25:3c:bb:39:cf:7c:59:e8:c8:9c:4d:
74:33:5c:cd:db:fc:1e:d2:63:b0:84:31:80:74:06:
80:a0:dc:6e:cd:36:31:0a:bb:17:81:c2:93:f2:88:
e3:06:c9:4e:a9:34:b8:7d:4e:4a:39:a0:29:72:15:
84:ad:29:c8:77:ed:62:96:31:0c:e9:a3:e1:2c:ee:
15:cd:32:98:92:37:5e:ea:24:98:7d:ba:dc:ac:6d:
08:bb:a0:a1:cb:e1:0e:80:ad:6f:42:c8:73:78:00:
1e:d7:95:4e:41:35:74:75:09:d8:f3:15:76:3f:b5:
cd:fd:c4:d2:5d:65:7b:48:4d:fa:3b:12:a6:6a:1c:
4f:f6:cc:cb:9c:8e:c8:49:69:42:7b:bd:86:70:ee:
ff:c8:c9:d0:fb:1e:13:c5:ec:7e:f5:99:58:ae:1a:
ac:f7:88:75:b5:28:d6:93:b6:ea:cf:c3:19:89:2f:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EA:13:18:6A:78:E6:19:D1:A7:F9:2A:29:08:D8:B8:E5:8E:98:36
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cf:84:47:e2:94:36:9e:56:45:60:06:4b:69:ea:8a:98:59:
3b:64:77:ae:7c:44:df:7e:bc:61:bc:7b:8c:cc:50:a2:eb:75:
e9:22:f1:94:b8:59:13:85:8b:52:f2:27:4c:8c:39:6d:f8:8c:
f8:90:83:49:30:3a:50:3f:e7:37:ad:c6:82:a9:c2:ed:2b:8a:
d2:44:ed:69:16:52:3a:10:9e:c0:3f:c4:41:1b:5d:d0:e2:21:
6a:a1:9e:86:38:27:42:2d:12:3d:6b:9d:ff:e6:ea:4d:13:e8:
34:d1:c0:87:0b:e8:72:4b:85:6a:a7:d8:19:c2:c1:12:0a:e7:
d3:ac:cd:75:a2:49:c7:a6:fa:3e:ce:d0:7f:3c:4c:60:e8:ae:
e3:5b:dd:1b:eb:a3:29:73:19:18:91:37:1d:d3:62:75:54:d8:
53:2a:6e:1a:6b:f3:69:95:58:de:36:ae:3e:48:14:08:bf:88:
5b:ea:24:b1:84:b1:be:c5:ca:a3:6b:31:c7:0e:be:cb:05:cd:
70:3a:02:d5:4f:3e:71:58:96:3b:0c:e2:a3:ea:eb:58:65:63:
70:f2:64:87:76:19:77:f8:0c:00:54:1d:c4:6f:4b:ea:2d:46:
1e:1d:40:83:da:9f:ff:23:d5:9c:a1:6e:de:db:3c:fb:53:8c:
56:3d:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:41:17 2025 by rpki-client