Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: ta4K3mp0XVkM3uDGVrMmCOGKbp6bYSG+OgMh0B3qlVU=
Subject key identifier: 36:4D:15:DE:5C:BE:A4:8B:76:BD:D1:94:76:01:F1:69:87:80:98:BC
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 0197B70ECC53364B34C3239D19562733383C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 06AE
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: kILB9c3VB9VfnM23py4lT6pO+RJqYrjZvnv1akbE5qg=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cc:53:36:4b:34:c3:23:9d:19:56:27:33:38:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=364d15de5cbea48b76bdd1947601f169878098bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:73:e6:82:48:ae:1d:b6:68:83:1f:59:95:
79:2d:a0:8a:46:23:fb:fa:29:e7:de:90:db:01:da:
ca:0e:66:cb:03:71:44:dd:e2:2b:88:68:3f:bb:1a:
f4:ff:43:37:3c:ee:7a:5c:7f:d3:4d:39:6f:9d:27:
1d:75:7d:a7:12:09:fc:34:e3:11:26:2e:81:c6:23:
cf:36:d4:97:b4:80:b9:ed:17:8d:8a:f5:aa:87:c8:
f7:ed:4e:13:8e:49:f2:8d:10:cc:9b:a4:78:99:b6:
3b:e8:6b:bd:49:de:81:81:80:07:17:71:bc:e1:d3:
8c:c2:73:1d:98:71:30:0f:d0:b9:31:46:d0:10:8a:
69:5f:4c:85:e8:0d:c7:28:24:c4:4d:54:48:ab:d7:
96:23:18:44:f5:68:18:47:5b:bd:68:d6:0f:44:55:
a6:ad:50:00:ce:90:9d:31:f7:1c:4b:da:0d:58:77:
fd:7a:29:b8:55:42:87:c3:d9:d6:8a:bc:f7:a7:a0:
87:92:92:78:dc:15:46:c5:27:a7:b9:11:f5:3a:aa:
f7:44:b5:3d:4f:c0:41:68:89:af:e0:14:f0:ec:22:
c9:85:66:44:95:09:38:7b:f5:8b:02:40:68:a4:bd:
e8:8d:c4:b3:08:e4:d1:fd:b6:b8:ce:23:87:7e:0f:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:15:DE:5C:BE:A4:8B:76:BD:D1:94:76:01:F1:69:87:80:98:BC
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:fe:59:9c:c2:32:35:58:5a:33:21:87:0e:1d:e2:9a:1a:d2:
94:0c:95:e2:a2:d0:4e:03:0e:cd:29:5a:69:89:77:31:89:4c:
70:9f:94:3f:41:ce:a3:a0:98:c0:7a:be:5a:48:11:02:bc:b6:
67:16:56:53:dc:fb:e7:31:21:05:bd:da:85:49:31:da:43:0c:
53:a9:a0:c0:ee:b0:12:73:8f:20:f5:47:74:36:21:41:b7:25:
80:20:bd:9d:13:8a:f3:c5:3d:dd:86:36:b1:43:e8:0e:87:38:
8b:36:0d:5f:ac:e0:55:bc:0c:a5:8a:57:14:87:bb:eb:ed:d9:
0e:b9:f7:84:a4:4c:b3:fe:cf:db:bf:3d:d7:82:8b:02:16:58:
d8:00:1b:06:1e:fb:0c:e6:9a:fc:4f:e5:8f:a7:e6:0b:0b:bd:
c3:aa:93:d1:e6:f4:86:fc:21:2e:2f:c6:c3:89:56:d3:cf:1b:
72:ad:45:38:57:40:40:f1:1e:88:36:00:63:9f:6c:58:6a:02:
57:36:e4:d0:87:04:d0:0f:ff:9b:ae:a9:49:10:b2:0d:bf:eb:
65:3b:e3:4e:4b:5e:74:6d:9f:73:20:67:64:8c:c1:7b:fa:b5:
62:af:09:d5:c2:31:07:60:0f:df:e6:e6:ad:38:f4:a5:86:ac:
ed:5a:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:37 2025 by rpki-client