Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: h6My56zTVzr+NIscc9nQ3rXKZuony0hX1wyVWmT+dQ0=
Subject key identifier: 27:76:AE:33:D3:DE:E1:C1:B7:C6:D5:A1:2F:76:22:32:74:AB:E2:BA
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 0197B88F4F35C5B439C35850AC97555A163D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:29 +0000
Manifest this update: Sat 28 Jun 2025 22:01:29 +0000
Manifest next update: Sun 29 Jun 2025 22:01:29 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: /cX/EzviT44rxzqoY4NN/KE6kkiEIvjs0ujBZ7OBZs4=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:4f:35:c5:b4:39:c3:58:50:ac:97:55:5a:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jun 28 22:01:29 2025 GMT
Not After : Jun 29 22:01:29 2025 GMT
Subject: CN=2776ae33d3dee1c1b7c6d5a12f76223274abe2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:51:0a:5f:06:95:6c:cc:dc:63:80:7f:e4:
3e:4a:b4:53:90:8c:ba:5a:5e:db:60:e6:70:aa:9c:
1c:85:dd:0e:42:0b:03:d4:02:0d:4d:d4:67:4f:ad:
e0:91:1e:e8:8a:82:1b:03:0d:a1:81:41:48:82:ff:
42:0c:27:cd:b2:a4:53:f4:31:34:bd:99:95:3e:1b:
bb:5a:3e:b0:5c:c8:58:51:fb:4f:81:e6:1f:e7:0f:
4d:f6:c8:e9:f0:5d:7e:48:07:8b:50:88:4b:90:da:
58:54:a1:ad:cd:29:df:de:c8:bd:5e:1c:5a:0d:d2:
3c:84:54:71:55:27:cd:54:fe:e0:08:73:15:c5:52:
73:b8:5e:c8:32:61:29:e5:cc:fe:5a:32:e8:e2:86:
e8:19:73:fb:39:c2:d7:65:62:ed:cc:e7:ba:0e:60:
b6:dd:1c:0f:00:bd:94:b2:d5:df:60:16:3b:b5:e8:
a9:c8:4c:41:35:58:d6:f2:20:54:b9:28:27:d5:59:
f3:ca:77:35:2a:aa:1c:fc:77:f3:a9:3c:21:71:ce:
bc:63:1d:81:e0:4b:19:4f:ac:09:da:8c:3a:d0:a3:
5d:2c:7a:83:e9:8e:16:f7:6d:2d:f5:5e:14:13:a6:
50:8f:ff:2d:f9:d7:1e:57:bc:6d:93:4e:91:96:3d:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:AE:33:D3:DE:E1:C1:B7:C6:D5:A1:2F:76:22:32:74:AB:E2:BA
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:04:a3:18:42:8b:f2:46:1d:1e:80:0e:b1:8b:13:99:fd:
07:40:75:0c:f6:ff:7d:4b:5a:54:25:5f:1a:4d:32:8b:04:5e:
4a:c4:73:2d:84:9c:cc:6d:f3:d6:00:10:35:51:59:fc:75:c2:
12:44:71:c5:7b:44:ce:d9:60:cb:84:3c:f9:b0:17:cd:a3:f8:
4a:b0:a8:65:d9:83:57:f7:a1:3c:ef:8c:4f:59:5c:92:95:39:
73:15:e7:42:90:02:80:1b:49:14:2f:f1:f5:69:6d:66:c6:f9:
0e:ee:d4:67:bd:91:7d:b7:af:2b:8f:7b:84:69:e8:59:12:ed:
02:c7:0b:81:6f:a2:fe:7a:8a:d5:de:23:ab:c3:e2:81:d9:13:
c3:84:61:d9:b2:c5:69:36:ca:24:59:82:c3:46:85:d0:a3:44:
c8:92:08:6a:e0:8d:a0:13:0a:10:69:d3:36:7c:49:f8:12:8c:
65:23:e5:cd:6a:7e:de:5b:71:12:8d:c6:84:fa:66:1e:43:67:
7f:a7:2a:fe:e0:db:42:b4:93:36:45:98:f6:ae:a6:8b:40:b8:
31:3b:c3:6a:d5:c1:ec:69:64:a5:1c:35:c2:66:a7:43:b3:96:
d2:19:b2:79:9a:40:68:87:1c:87:29:0b:a6:8d:44:6c:43:65:
8f:e3:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:07 2025 by rpki-client