Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: jEQeC+1fr8nS7ZftScB1i3saaVHLw3C3t3rxAt2qKz4=
Subject key identifier: 9A:D2:DB:4A:89:23:92:62:1E:F7:55:39:C8:15:85:BE:D5:47:A1:35
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 0197B74594B69FB11BFB161D187F52978CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: /2bMP3tX9O1By2pFre8DJAUPbjudkZAe6Is4gdtEh6Y=)
2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:94:b6:9f:b1:1b:fb:16:1d:18:7f:52:97:8c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=9ad2db4a892392621ef75539c81585bed547a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:73:88:ff:b3:49:53:2a:bd:ab:f3:87:10:
7a:59:52:3d:76:a7:ba:d5:4d:c2:67:ec:d8:23:64:
05:c4:54:e6:ee:d6:2b:e9:62:39:4b:dc:17:bd:10:
8c:df:1e:bf:e0:b4:4c:b4:03:4b:48:77:e0:2e:ce:
72:39:de:ac:2d:e1:79:12:f9:45:88:4f:d6:22:84:
31:db:76:7a:71:d1:a8:0d:64:7b:38:15:a7:c1:6f:
14:f5:15:ed:76:1c:98:e2:07:60:84:32:6d:97:99:
10:be:b6:14:d4:9e:ee:ec:46:44:07:78:60:6a:dc:
71:7c:f3:2b:8e:ba:ff:88:8d:a9:f6:cf:5e:ef:f4:
2a:2a:40:5c:ad:4a:12:a2:5c:97:66:72:eb:03:49:
39:57:12:a8:fb:60:65:87:d4:8a:52:2e:cb:e3:1d:
b3:f9:92:48:64:53:03:f4:dd:61:e1:9a:dd:16:0f:
e8:b7:42:b8:c7:67:69:4c:38:1e:ab:25:46:99:75:
93:5c:ff:55:31:29:41:b4:04:8c:22:7c:98:e0:cd:
6a:01:06:f8:31:73:f3:c3:f6:cb:85:9c:96:67:41:
25:d1:7a:54:71:54:64:4a:91:ab:b9:2c:58:43:db:
d1:aa:51:94:ce:05:d3:0d:24:2a:e1:1a:ae:2b:f5:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D2:DB:4A:89:23:92:62:1E:F7:55:39:C8:15:85:BE:D5:47:A1:35
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:89:8b:b3:53:56:37:29:d2:33:f5:8e:68:a0:77:a9:6c:
f3:e3:d8:6c:db:6b:67:91:a5:77:56:f5:2c:3b:d4:17:d3:55:
bf:b4:67:65:8d:66:d9:83:ba:a9:9e:50:f7:23:c7:43:8a:28:
c7:98:49:6d:0d:78:b3:43:50:16:ac:07:28:f4:53:3c:dd:fc:
2e:40:50:3a:30:ad:74:b2:39:ef:94:76:c1:f4:3e:68:f4:cf:
58:8d:bd:2c:4f:67:ab:ad:1f:a6:5a:7d:dd:86:54:0d:e8:26:
fb:14:e7:0a:70:18:7b:21:88:3c:16:a8:1b:7a:04:5e:7a:76:
a0:67:ce:b7:c2:6d:1f:63:78:6c:86:43:86:b5:c5:76:14:38:
ca:2b:cf:4f:e5:f2:ee:06:2a:97:66:01:3a:02:a6:47:a2:c1:
89:d2:e8:99:b9:3f:fe:d7:8f:ef:b4:7a:c8:ea:51:3e:4f:d3:
fa:f2:e9:93:26:61:0c:bc:62:7f:cc:29:54:49:54:69:e6:5e:
d8:4d:09:11:c8:4c:e4:71:6b:bc:9e:b0:61:f8:6f:dc:58:5f:
eb:08:a8:a7:80:2e:c6:22:d0:c9:51:3c:2e:94:e2:aa:e5:df:
53:98:2d:fe:2f:f6:0b:50:e8:05:9f:5a:ce:18:d9:97:39:80:
0d:34:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:25 2025 by rpki-client