Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: K9jRqb01ihYhKamyqV5pJDTn0PK8kgCE/u7xCru4mWU=
Subject key identifier: 8B:81:4E:AD:C1:D7:03:2A:5B:75:61:EC:2C:75:25:54:A6:A4:B5:F8
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 0197B6A13C211A85E46C17C8196BED415F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 0F32
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: rNSfWk/zObQPDmrht0iAzIkBF0Rx71z/AVgjiqDmvgs=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3c:21:1a:85:e4:6c:17:c8:19:6b:ed:41:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=8b814eadc1d7032a5b7561ec2c752554a6a4b5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:3f:61:d5:1d:f5:7a:af:2f:ee:42:4c:a7:
60:26:87:df:ca:39:3a:ef:9a:6a:c0:8c:b3:a9:37:
22:43:96:82:cd:93:28:1f:8a:65:45:1b:64:e3:fd:
54:d6:fd:68:1b:c9:19:36:a1:9b:59:10:0a:61:b9:
4d:19:c5:73:22:f9:4a:27:e1:27:1d:05:f3:41:6a:
f0:2c:44:d3:6c:a3:a2:dd:a3:a4:ea:04:f5:f2:a5:
84:92:e2:7e:30:36:94:b2:cc:a2:bb:ce:fe:5b:24:
78:69:e6:56:13:92:08:dc:cc:35:56:c5:35:1f:2e:
6c:80:dd:f6:09:8b:4c:c9:73:e3:bd:40:65:b6:6f:
66:05:c2:5e:8e:2a:5b:6b:6d:6d:18:9f:f8:13:ca:
eb:f2:87:f9:82:6c:bb:91:7a:56:a4:31:24:a1:fa:
10:e1:96:8b:8f:87:59:9e:37:f5:a8:ab:8c:33:bf:
9c:f6:04:96:1f:f2:57:cc:9c:02:72:f8:e6:2b:a8:
40:22:4c:c3:c3:14:e0:60:93:7e:0f:51:ff:49:8c:
68:3e:8f:39:4b:7f:91:a8:f4:da:5b:a9:0e:4a:2b:
84:40:30:db:69:fd:14:7b:31:05:fa:de:0c:6e:92:
ac:aa:5f:96:63:3a:bf:f7:10:7d:7a:c1:84:61:85:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:4E:AD:C1:D7:03:2A:5B:75:61:EC:2C:75:25:54:A6:A4:B5:F8
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:55:99:c6:78:eb:b4:fb:5c:91:68:a0:2b:a2:52:54:49:
c3:f0:3b:0c:2e:98:65:8b:2c:cb:91:39:3d:72:30:72:eb:9b:
cb:a5:29:99:f6:5c:4b:a4:2d:69:85:bd:ba:5d:4e:32:af:47:
e7:2d:cb:58:77:c9:d2:09:20:b1:da:f8:9a:fe:d9:a8:5e:2d:
6d:85:30:c4:88:6b:ae:24:31:fd:e0:21:34:c2:1b:25:7f:23:
86:8c:57:77:59:2a:97:4f:51:84:99:c9:33:06:18:41:9d:a2:
0c:00:64:4f:5e:ef:e6:fc:41:47:96:26:79:e1:23:20:4e:ff:
87:f2:48:dd:87:cb:f7:55:23:e8:e8:55:6b:03:a3:cd:55:cd:
8b:f4:ba:9d:1a:cc:b7:a9:08:37:2a:68:18:75:de:58:27:a5:
99:27:96:9e:be:bd:14:84:67:6c:f9:34:0a:1b:8c:78:dd:dd:
00:a1:5f:cb:76:0a:b4:0c:c1:78:54:fc:b1:2f:64:4d:1f:00:
62:ce:f3:af:c7:f8:05:c6:ca:d3:80:51:1d:f8:f6:6e:ae:70:
8e:0d:f8:93:37:03:f1:15:01:82:b8:e3:48:b9:fb:53:0f:02:
d4:9e:03:85:16:b8:56:6e:09:05:56:ed:b9:e3:0f:bf:4c:c7:
89:e8:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:20 2025 by rpki-client