Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: HCrO1UYp9AyNBtzYHMlXYMiy/kBS1CKZFKbj5yUVTOw=
Subject key identifier: EC:70:36:D4:A4:83:1F:2F:67:5A:96:B1:30:04:67:43:DA:CB:3B:42
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019748C3240DEEDA19D25D27952ED5A4CDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 05:00:37 +0000
Manifest this update: Sat 07 Jun 2025 05:00:37 +0000
Manifest next update: Sun 08 Jun 2025 05:00:37 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: D5BTjrFDre8lKdeLGc5y+QiAz2+XMucWxHoqWVNEVVY=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:24:0d:ee:da:19:d2:5d:27:95:2e:d5:a4:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jun 7 05:00:37 2025 GMT
Not After : Jun 8 05:00:37 2025 GMT
Subject: CN=ec7036d4a4831f2f675a96b130046743dacb3b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:8a:8f:e2:03:41:5f:d2:5f:04:fa:48:7c:
3e:50:b8:b7:11:c0:f3:77:cc:7d:47:d2:16:64:4a:
bf:69:50:ea:f4:f9:e1:59:21:01:c6:31:cb:84:90:
d4:6a:1c:34:b0:42:dc:22:d4:37:12:ce:de:af:07:
8a:08:57:11:6a:e2:cf:51:b0:66:b9:f3:61:97:3f:
f7:f8:e9:1a:cf:d1:ec:d7:e6:33:ef:a8:6c:6e:bc:
24:83:35:48:3f:83:ff:29:43:44:1f:1f:fe:a9:b5:
cc:59:1a:ab:0c:f1:95:ea:65:d6:9e:eb:7c:80:6a:
e9:b5:94:80:03:74:11:a4:49:f4:03:cd:94:86:51:
06:bc:df:fc:83:02:09:1c:58:c9:60:6a:97:d8:9c:
8c:21:f7:4c:0a:07:3f:56:15:3b:86:37:90:62:df:
a5:7a:2f:bd:88:6c:e9:57:b7:d0:96:e3:01:3d:77:
24:f8:a2:91:82:82:05:7f:54:ea:b5:0d:6e:22:75:
9e:a3:9d:b3:3c:c6:47:2e:e3:05:06:09:cd:1b:ae:
65:20:d0:78:0b:c4:50:13:ec:32:fd:ec:fb:16:a9:
0b:27:bb:ff:2e:1e:8b:49:2c:27:ed:9d:fb:e0:ac:
5f:7a:56:34:f9:97:ee:c9:3c:b3:ea:45:dc:41:11:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:36:D4:A4:83:1F:2F:67:5A:96:B1:30:04:67:43:DA:CB:3B:42
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:91:82:e8:15:b4:90:7c:c8:36:70:ee:b8:8f:a9:fa:3e:21:
b4:a8:a0:0e:13:f8:45:e0:3f:c7:00:ed:f1:ae:b4:06:b3:2f:
e6:bb:bc:08:ce:78:cb:88:c1:bb:41:68:be:f3:1c:2c:96:51:
61:3d:c7:a7:a3:24:3f:ba:67:bc:44:f2:df:ae:f5:58:52:49:
4d:3f:90:ae:40:16:de:f6:ee:1a:40:b9:ee:a8:df:d6:f9:29:
36:20:b6:92:88:ad:62:e3:f1:60:02:32:c5:7d:c0:ad:cb:50:
7f:c7:7b:cb:33:a5:0e:cd:07:cc:d6:2e:63:ed:80:d5:d0:8b:
19:1b:99:52:a1:38:0a:84:f7:ec:c9:18:65:c6:85:f3:32:58:
e4:fd:88:13:eb:96:c3:12:21:9d:53:e2:bf:06:fc:66:b2:6a:
f1:39:5c:00:6b:af:aa:c0:a6:c6:82:bf:a8:fa:af:4f:ab:9d:
5e:8d:4c:33:02:d9:21:c9:26:c4:e4:1f:d6:81:8d:aa:9a:3d:
69:c2:16:f0:91:cf:13:06:65:89:b6:7e:5e:82:f2:9f:ea:8b:
65:9f:78:b4:3c:ce:3e:93:70:6f:3f:7f:f2:65:b8:e8:ca:61:
a3:ae:68:d8:b5:fb:b3:84:2f:31:c1:94:d4:0f:5d:50:04:74:
bc:21:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:09 2025 by rpki-client