Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: zkKAPtSyQWNqmSj2EqxlYRphlfW3NbQeTqpOPcVnjB8=
Subject key identifier: F7:CB:2E:59:5F:80:50:42:3F:33:0B:31:96:15:38:55:A0:EE:B4:1B
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 0197D32A812194EB1311DD967EFF6987EE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0AFC
Signing time: Fri 04 Jul 2025 02:01:07 +0000
Manifest this update: Fri 04 Jul 2025 02:01:07 +0000
Manifest next update: Sat 05 Jul 2025 02:01:07 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: zWqc1aF1eBg686Yskw6Ge9OdJUf5K0YGkUC3GbO1HtU=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:2a:81:21:94:eb:13:11:dd:96:7e:ff:69:87:ee:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Jul 4 02:01:07 2025 GMT
Not After : Jul 5 02:01:07 2025 GMT
Subject: CN=f7cb2e595f8050423f330b3196153855a0eeb41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:3f:c7:26:d9:3d:49:47:92:71:52:3c:b9:
93:70:7b:e7:89:b0:6c:46:d6:63:f6:cf:7c:74:c8:
24:b5:92:b1:be:71:3c:2d:9e:aa:15:36:6a:ff:4f:
a3:18:11:69:3e:26:3f:37:8c:d1:fd:f1:8b:33:8d:
b7:f0:bf:70:01:c2:f0:78:94:8d:5a:89:6d:96:d9:
d6:7d:82:a8:b7:02:e1:41:ce:27:26:35:8f:1c:87:
89:a8:ed:15:99:88:ea:c3:68:63:7d:ee:a3:45:ed:
bc:d8:18:1d:61:5c:1b:49:ad:0c:b9:eb:f6:c4:ad:
54:04:20:03:b8:1f:43:48:94:32:a6:44:6a:ec:31:
16:f2:d5:c5:7b:7f:5f:b9:12:f0:41:07:c2:6d:1b:
1d:90:0f:6b:e3:d9:25:00:18:10:bd:73:76:1c:e0:
f9:8f:79:83:18:0e:88:70:58:29:7b:4d:f3:fe:0b:
53:4e:4d:49:b7:4a:b8:1a:da:f3:f4:21:45:ed:30:
f9:e3:cd:e2:ba:85:f3:5e:05:e1:02:e2:5d:d2:40:
e8:88:60:ae:02:10:57:db:44:8f:ca:d8:56:74:cb:
0a:9f:85:62:52:19:48:a0:bc:74:cd:4c:dc:9c:d8:
87:13:7d:d5:77:e6:04:44:9a:a4:58:3e:66:38:a0:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:2E:59:5F:80:50:42:3F:33:0B:31:96:15:38:55:A0:EE:B4:1B
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:90:20:a7:e4:49:3d:49:4e:59:8a:b9:78:9f:9f:b4:d3:
c1:fa:87:fe:dd:19:4b:61:6e:20:93:98:87:c7:b2:66:cb:0e:
80:d9:d6:b6:31:1d:03:50:98:9f:09:b8:df:44:6f:f5:50:3a:
8a:72:95:03:4c:d9:65:2e:2b:68:8b:0f:a1:ab:71:1f:c3:e1:
ed:c6:ef:9b:6f:57:3c:68:ea:9d:2e:c1:22:a3:a7:e0:af:26:
1c:c8:21:4e:ed:5e:30:29:1e:7f:d6:75:38:0c:29:20:4f:09:
a9:2d:86:f5:7f:55:d1:78:a1:ce:c8:d2:72:10:e1:d8:97:f9:
05:de:93:2a:ad:7c:7f:45:d4:e4:1d:39:50:bd:03:d6:0a:4f:
75:ee:a1:a5:03:ed:21:24:6f:06:22:26:e4:f2:c9:56:d5:8f:
83:98:3b:18:10:96:86:74:8d:52:0d:6a:a6:fc:85:c7:50:a2:
e3:a9:81:06:a4:e4:01:85:6a:77:7a:60:17:1c:8e:11:1b:d5:
ef:b8:19:dd:cf:00:11:f4:e7:89:69:f5:15:11:34:24:70:6e:
ad:0f:4b:e2:f1:a0:4c:78:40:59:18:ae:7e:9d:27:41:79:08:
82:3f:5c:86:cb:02:61:35:14:10:dd:2a:10:1f:5d:15:5b:65:
02:c8:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:46:20 2025 by rpki-client