Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: KWycv97mbdwXOItIIonx9uLoyO04Q/s8h9ATlmWMNOk=
Subject key identifier: BA:64:97:EE:DC:EF:E0:C0:6B:3E:B5:1C:44:E1:04:28:A5:0F:A8:38
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 0197B77C3276281AAE9A9629A170204017FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: m+IFTRuGivJOUw9xaPgdxdqqRHVH2R9uctpu0EIyMm0=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:32:76:28:1a:ae:9a:96:29:a1:70:20:40:17:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=ba6497eedcefe0c06b3eb51c44e10428a50fa838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:b5:1c:89:d4:61:06:cf:34:d4:d7:a5:a2:
4e:96:5f:16:8c:07:18:34:3f:b2:3c:c5:58:ba:ec:
4b:bd:9c:39:25:16:2d:d1:b3:13:97:17:11:ec:92:
fb:71:a8:cf:a2:cf:89:dc:1a:09:58:2a:dd:3c:a9:
2b:9c:07:96:2c:e4:73:b5:3e:a0:b8:c8:06:93:53:
5c:9d:8f:ff:4b:7f:d3:52:d1:2f:04:45:a9:03:b0:
88:92:6a:ae:a8:60:b3:4c:5c:8f:04:84:5f:1a:be:
aa:62:00:18:36:b0:30:5b:f6:53:49:58:86:3c:c2:
77:43:5d:eb:fc:82:e8:dc:59:ba:3e:a3:53:eb:80:
0b:11:e3:02:05:2e:5a:87:f1:8e:41:b0:57:52:14:
c0:06:94:8f:06:8a:26:46:8c:aa:6d:46:f8:9f:97:
03:21:1a:23:6d:e6:cb:14:c1:cd:83:78:79:13:3d:
58:ee:37:19:e1:13:ca:50:9a:44:62:ba:57:35:bb:
00:40:f7:de:07:19:60:13:44:19:41:e3:9a:d5:00:
73:ef:dd:4a:40:18:70:58:a0:43:0a:32:db:c8:0c:
6e:ee:70:dc:f8:a0:5f:db:e7:75:29:7e:c5:40:22:
c5:c9:39:dc:6a:a0:2c:86:e9:47:5c:ae:91:65:17:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:97:EE:DC:EF:E0:C0:6B:3E:B5:1C:44:E1:04:28:A5:0F:A8:38
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:69:7f:34:2d:f1:8f:f5:6d:d7:16:9e:94:d9:f7:0e:72:9c:
7e:9f:bc:19:6a:81:7d:dc:bd:58:04:12:37:8b:72:b3:1a:36:
10:d8:46:5b:60:af:ac:0a:dc:99:e8:94:54:b2:7a:34:e8:d0:
7f:bb:de:0d:d4:bb:99:66:df:aa:46:eb:e2:67:c5:c0:01:cb:
5e:fe:19:10:db:76:13:77:8e:4d:c6:45:ca:7b:85:d5:3e:e1:
86:91:c5:a6:39:25:b0:23:2e:69:4c:15:12:c7:dd:a9:fa:c7:
f6:c5:35:28:3e:c0:d0:85:6d:ee:04:da:67:dd:05:f0:db:b0:
37:59:34:bf:50:07:73:b0:fd:5f:8d:3d:96:7a:73:36:5b:20:
63:80:9b:59:e1:e3:41:fa:40:b3:89:5b:4b:35:81:ac:04:71:
20:7b:a0:d1:eb:16:13:15:13:d6:83:c6:14:80:1e:d2:cb:0b:
dd:45:cb:88:f3:a8:f5:06:34:d8:76:8a:75:bb:13:50:33:fc:
08:60:52:1b:3c:4e:b6:3f:fb:cd:d9:30:ea:87:68:05:2f:8a:
3e:10:c4:cf:3f:40:31:5d:a8:f0:e0:de:34:10:f9:85:a8:ec:
2d:5b:0a:aa:1a:85:b0:a3:fd:0f:03:4a:03:95:5c:69:11:74:
99:dc:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:40 2025 by rpki-client