Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: JaHA+XPxgQXadLDZ5L9MkI1sphPeWeIxp0jV9biQtJo=
Subject key identifier: 25:4B:AC:1D:8C:90:F1:4F:C4:67:56:E9:60:B4:A5:43:3E:19:45:31
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 0197B6A19599EC92503BA22D7C6DB148B40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:12 +0000
Manifest this update: Sat 28 Jun 2025 13:02:12 +0000
Manifest next update: Sun 29 Jun 2025 13:02:12 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: RIFeGXAbr7t3jY5urkyDaRaVfXrOxed50Uv0+1EMfFA=)
2: QrmnbjgSygFDWHsO09VpW_iZC0c.roa (hash: VHw1+Cgx8Es+YaWERxb3+M1gB2Ndwqk8aRAjsalZIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:95:99:ec:92:50:3b:a2:2d:7c:6d:b1:48:b4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Jun 28 13:02:12 2025 GMT
Not After : Jun 29 13:02:12 2025 GMT
Subject: CN=254bac1d8c90f14fc46756e960b4a5433e194531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:07:de:db:20:7e:80:45:03:da:03:0a:31:
87:4e:f6:60:7b:fa:b1:1f:b5:57:99:c4:1d:a7:cb:
85:6d:5b:83:67:ec:f0:20:3a:d0:7b:68:2f:a5:e4:
08:af:23:96:9d:7e:d1:37:28:a0:c9:1a:07:f3:5b:
31:d5:39:0e:1b:ef:5a:3d:20:0c:ed:d7:39:5c:02:
15:e9:30:26:40:bc:bc:0d:3e:80:91:76:23:4d:99:
f9:99:f3:12:56:12:20:72:62:d7:27:73:c3:87:bd:
f7:9b:85:d7:62:81:ef:9e:b0:64:97:8f:01:44:42:
20:ed:57:30:40:32:0f:36:9a:61:28:ae:04:d6:23:
36:4c:b2:94:eb:6a:2e:de:a4:a0:79:35:5e:ad:53:
4e:ea:c4:e5:b6:cf:60:e7:d1:ab:f0:b5:0b:50:5e:
b3:2c:f3:6b:7f:50:e0:13:ef:37:e0:32:70:7a:91:
1c:ab:d3:4e:2e:f3:b4:be:10:2b:e5:81:37:98:16:
a4:19:e8:4d:01:ee:51:fc:3e:99:aa:73:cc:46:07:
c7:b8:3f:30:4d:c1:d2:81:47:e3:5c:d2:5e:f0:2a:
20:fb:08:0f:87:63:f2:6c:6e:ff:5e:9d:e5:2b:ae:
4c:4b:7b:91:04:b2:57:a9:b4:81:0c:a3:e2:a4:c0:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:AC:1D:8C:90:F1:4F:C4:67:56:E9:60:B4:A5:43:3E:19:45:31
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fc:d1:28:ab:e2:5a:af:f0:4d:7e:7d:ba:47:02:b7:bd:1b:
15:d4:17:38:63:16:cd:7d:10:4c:28:83:c2:40:01:99:a0:88:
e7:9f:d9:6e:7c:4e:69:65:5e:9b:cf:84:d3:d3:0e:91:a2:00:
af:41:c5:0d:55:70:db:4f:d3:f5:b1:b3:5f:71:1c:98:5d:a3:
e6:00:64:ef:0d:7d:3c:47:e0:68:d1:57:14:c0:f2:6c:3d:89:
8d:b4:87:8e:33:15:ec:92:98:f7:85:e3:3f:2b:32:24:a6:d4:
f2:46:fe:97:db:df:80:f2:0e:6f:6b:8a:6e:f3:9d:6c:5e:6d:
2a:4b:a6:39:e5:30:dd:84:e8:31:5d:98:d1:98:a5:16:8c:1e:
72:f8:7a:3e:cd:de:de:e3:54:b0:d5:0a:ed:06:0d:03:97:45:
c7:76:aa:f6:db:5b:dd:ce:14:cd:51:bd:8f:8e:d8:6d:35:f9:
6e:7c:e8:cc:99:15:c5:68:49:92:3a:b4:9b:3e:28:83:e4:09:
eb:dc:5f:a8:84:83:59:19:a2:69:dd:a0:c5:74:a7:ae:9f:3e:
8b:bf:ae:2b:65:dc:3a:f4:ad:db:87:21:8d:9f:a9:a2:c3:80:
82:e9:c8:e8:43:77:dd:2c:be:6e:0b:0d:73:ee:24:76:ec:93:
ba:e4:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:19 2025 by rpki-client