Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: sUmTmkV16F23KqS2PDFQtCW/f5Hvm+vWoSwI/qWzYYg=
Subject key identifier: 89:82:4F:D9:D0:55:C4:BE:6C:D2:BF:51:95:A0:57:82:24:4D:A4:0A
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019749318DD81038C19410F49A17D2AA9755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 07:01:13 +0000
Manifest this update: Sat 07 Jun 2025 07:01:13 +0000
Manifest next update: Sun 08 Jun 2025 07:01:13 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: cLwtQMaZZnUMBDKKgNqpmutv7OCIuCEVibyaTrZTtgA=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8d:d8:10:38:c1:94:10:f4:9a:17:d2:aa:97:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jun 7 07:01:13 2025 GMT
Not After : Jun 8 07:01:13 2025 GMT
Subject: CN=89824fd9d055c4be6cd2bf5195a05782244da40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:e3:d5:af:dc:81:3d:5b:ae:6d:78:e4:6c:
53:69:87:3d:6d:41:a6:d5:5d:96:00:43:34:1a:29:
15:d6:39:d7:29:a8:ec:9d:cd:cc:51:0c:4c:9b:b5:
45:3a:63:1d:9a:69:a3:66:3f:7f:92:5a:b2:57:1f:
4e:87:d2:db:1a:27:1d:d9:0d:4b:2c:6d:20:37:0d:
98:c2:e1:16:7c:7f:35:db:d2:be:cd:af:ba:75:5f:
89:f0:c8:1d:eb:37:db:fb:e9:c3:89:34:fe:f6:2c:
d8:19:9b:f8:1d:5f:7a:84:6e:3a:f3:02:fa:13:f2:
ec:6c:29:52:33:38:f3:91:2b:ee:f8:bc:4e:93:02:
54:3d:10:fa:0c:76:8d:6a:80:16:62:c7:c5:dd:89:
cf:27:e0:47:2a:9c:2c:51:dc:4d:ee:8a:6b:c9:c9:
d6:1d:b2:c5:d6:db:36:81:24:b9:c0:ed:87:61:b3:
c7:48:0f:6c:d2:18:2a:ed:0c:fc:44:71:15:7c:ae:
3b:ac:88:86:7b:88:30:80:65:07:f5:71:b8:e2:58:
d9:95:30:2f:9e:59:0a:89:f1:e0:57:1f:61:85:2e:
56:6f:dc:5c:83:de:dd:df:df:78:00:1c:66:37:98:
f5:d0:f6:ff:2e:6d:00:54:7c:b7:84:1f:a3:58:cf:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:4F:D9:D0:55:C4:BE:6C:D2:BF:51:95:A0:57:82:24:4D:A4:0A
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5b:cc:04:1f:1f:e0:65:b6:d1:33:bf:e7:ea:da:dd:f6:16:
fc:8b:29:75:a4:bf:df:29:cc:75:f7:68:05:6e:4a:70:e1:c0:
74:99:71:de:46:6e:f5:0c:fc:2d:15:3f:31:a6:c3:eb:09:7c:
bc:dc:01:d5:6c:30:ca:24:e9:0a:41:e6:0c:d9:03:83:fe:37:
98:5d:f1:1a:6f:90:79:50:f5:12:6d:7e:af:36:fa:9b:c8:60:
ca:93:1b:7f:24:5f:30:bb:a7:cf:0b:72:a9:28:d3:c7:85:dd:
6b:07:de:f1:31:05:57:92:6d:44:5a:eb:cc:85:45:63:9f:95:
5b:35:42:b3:56:df:e2:6f:4c:d4:e2:9c:74:b5:23:7d:23:b4:
7c:70:f2:59:0b:9d:34:51:c3:52:85:9b:11:a6:ff:6e:22:fc:
49:a6:23:46:e2:29:67:93:4a:8d:5c:01:9a:ec:97:87:ee:09:
da:dd:a9:c9:c2:65:a7:0a:c8:44:94:68:bd:6d:e3:86:23:4a:
d4:cf:1d:55:aa:3f:d3:93:2e:9c:32:68:bd:e4:19:5a:7d:57:
c2:3b:20:03:ab:91:06:32:04:c1:d5:63:e2:8e:f4:51:b5:00:
fe:66:64:c6:f4:c9:51:61:0d:77:e3:a6:5c:16:34:d6:77:fd:
af:b2:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:37 2025 by rpki-client