Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: nn5v1YYRTkxCMrdbFfi3KGlC+9sM446pBnBEpBWAyD0=
Subject key identifier: 60:24:C1:6D:31:2B:77:2D:B4:5F:CF:01:74:89:09:B0:97:12:A8:81
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 0197B8904005E499D0170E31F3870C0241E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 1199
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: rUdbVeOiJcFHdT3B+tSSM77kuu79EVUbEKHmIRAFYv4=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:40:05:e4:99:d0:17:0e:31:f3:87:0c:02:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=6024c16d312b772db45fcf01748909b09712a881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:27:8c:a5:d1:fc:97:df:c5:9e:7d:4f:4b:
e8:dd:b3:67:5d:dc:f5:d1:b5:8b:38:13:f9:77:7d:
ed:45:fc:53:11:0a:39:25:be:bb:a2:7f:61:be:e6:
6b:d3:35:87:5a:0a:bd:d3:3d:cf:68:a2:5f:6e:20:
98:0f:e4:fd:74:72:74:1d:2c:42:fb:68:5b:15:96:
dc:67:fd:ca:14:e1:20:19:4e:01:2a:f9:de:53:af:
b2:2f:e1:0a:61:32:be:e6:77:77:e9:ea:ff:91:ec:
c9:86:be:b8:7f:5c:78:58:8c:12:3c:5e:74:52:89:
e4:93:41:6c:72:5f:ee:8f:9f:db:f2:89:c2:b3:5c:
a2:30:9a:62:83:9a:5b:eb:36:76:77:8f:ef:25:2b:
91:a7:b4:03:0a:4a:0b:2a:4e:5d:5f:9b:ee:2b:2f:
06:71:0f:99:b8:71:63:16:1b:ca:57:a4:24:9d:38:
db:e5:f4:58:aa:e0:cf:93:47:81:e1:7f:6b:9a:f9:
a1:28:80:c4:f6:94:65:26:cc:9b:95:6a:e3:27:0c:
80:50:e8:4c:a7:d7:59:a9:e8:9b:de:a1:cc:46:30:
31:f5:7e:f5:bf:b2:52:95:75:26:24:cf:f6:b1:54:
e2:8d:5e:8e:88:cd:2b:27:bb:c0:59:a5:b0:b9:95:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:24:C1:6D:31:2B:77:2D:B4:5F:CF:01:74:89:09:B0:97:12:A8:81
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:b5:ae:3b:47:60:9a:44:ea:db:23:81:99:d0:8b:c7:e4:
74:0f:9e:63:0b:c3:08:f6:ef:91:51:d8:06:ef:78:0d:16:79:
f1:0e:1a:b4:bd:2f:9c:14:de:91:d3:d8:c6:bc:51:f8:93:5b:
87:26:cd:f6:2c:ea:37:91:a0:30:03:d1:fd:77:f9:50:7f:d1:
5f:77:84:b4:05:c8:f2:cb:90:b0:de:93:4c:69:c4:2d:b1:a8:
68:72:34:1c:a4:8f:88:da:5d:63:49:c2:15:5d:7b:86:d3:03:
b0:ac:2f:bc:5c:40:d4:82:95:5d:98:76:42:60:17:af:a4:97:
02:33:bf:e5:58:c6:b1:aa:5c:bd:97:23:a9:8b:8f:3e:8e:60:
ff:b5:ba:f8:10:17:05:11:ef:c2:08:b5:e9:8e:fd:86:d4:cb:
76:03:ba:6a:77:92:43:1d:73:2f:35:28:5f:7b:f6:f1:89:97:
24:c0:9b:ae:3c:bf:2b:8e:5a:47:52:d7:03:69:c5:09:b6:83:
dc:bc:af:30:c0:ad:e3:7a:37:39:ab:a5:d7:42:43:60:6b:85:
93:51:5e:e5:77:85:68:b5:35:9a:30:d0:49:bc:7f:e0:3a:21:
e1:79:b5:1d:34:20:e9:59:a4:1d:d7:6d:b5:b9:bd:5c:2d:44:
7d:75:26:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:54 2025 by rpki-client