Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: 4xy2kXWIPDt1aSet5QBCFXAzOWWOSDdknjAt+aQ1CXQ=
Subject key identifier: 3A:A4:D3:B5:D8:80:D1:BA:C4:E8:FC:ED:C6:58:D0:63:34:53:B5:02
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 0197D43CCA6DA87E3283239C422CA84C3F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 8A
Signing time: Fri 04 Jul 2025 07:00:43 +0000
Manifest this update: Fri 04 Jul 2025 07:00:43 +0000
Manifest next update: Sat 05 Jul 2025 07:00:43 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: nofysSYH8Ud5Vo1wcgJPnKrWEi4dVOrvQannRNt2YKU=)
2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:3c:ca:6d:a8:7e:32:83:23:9c:42:2c:a8:4c:3f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Jul 4 07:00:43 2025 GMT
Not After : Jul 5 07:00:43 2025 GMT
Subject: CN=3aa4d3b5d880d1bac4e8fcedc658d0633453b502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:48:c6:aa:90:d0:81:8c:cb:49:04:d1:35:
c5:70:31:c1:9c:c3:9c:0c:af:f6:34:c7:33:43:0a:
be:ee:48:8b:2f:f6:be:96:88:8d:62:1e:ae:50:6c:
6a:89:34:ef:21:33:31:f7:c2:cf:95:3d:26:52:8c:
a6:4f:66:ba:af:f4:4f:a8:e2:41:bc:30:86:65:8d:
40:09:65:f2:09:89:3b:03:14:98:df:3b:41:3d:04:
14:a8:5e:c0:c2:c7:d2:ad:44:58:2c:cc:c3:ab:f8:
95:3b:42:1a:13:c9:fe:96:3d:ae:87:a1:75:92:d5:
54:12:33:1a:c5:45:27:8a:13:81:b8:7f:07:5f:5a:
54:cf:23:2a:c4:4a:30:cb:56:5d:ee:94:6f:94:3b:
6e:c8:4e:25:16:61:bd:05:fe:07:72:b7:01:e5:72:
dd:df:85:63:15:a3:88:ce:da:ab:6d:dd:b1:0e:31:
b0:24:d1:98:5e:0b:a9:7f:ad:fb:b0:7d:68:60:fe:
24:e2:69:f7:af:6b:3c:d2:32:a3:a9:8e:08:95:30:
0a:89:02:3e:5e:45:af:bd:39:d0:43:fb:4a:16:f1:
86:47:33:4c:24:14:19:4d:cb:5a:da:ef:75:a7:cb:
3c:e5:60:30:5b:01:44:b7:c4:44:57:1a:32:ca:77:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:D3:B5:D8:80:D1:BA:C4:E8:FC:ED:C6:58:D0:63:34:53:B5:02
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:df:e6:39:76:9a:69:f5:3e:85:fa:2c:06:53:4a:50:b1:23:
93:46:24:72:0f:6d:b5:81:d0:1c:2c:94:58:ec:1c:56:1f:d0:
b0:3e:66:2c:c0:54:8a:75:32:05:70:17:01:fd:a1:b8:6e:59:
f3:0e:a4:22:02:8b:11:be:05:b5:db:e8:1e:6f:77:bd:06:1d:
27:41:3f:5d:6e:11:cd:fb:6b:65:e2:c9:17:80:22:e4:3b:ec:
ee:11:8b:6a:7e:0d:6f:41:7c:cf:c4:4f:a1:36:71:d9:3e:61:
2f:1b:6c:1c:85:43:9b:bd:0e:5d:60:67:c2:fc:b8:cc:ff:8d:
86:09:9c:e5:1e:f7:8c:18:c1:32:89:6e:69:1b:b8:92:1a:4b:
8d:f8:8c:c5:1b:75:5e:e7:28:5b:a2:97:37:45:14:e9:86:a0:
96:c7:4d:0d:66:21:ba:6f:b0:e5:f4:ab:64:ef:06:89:da:f4:
35:b9:48:be:48:6e:4d:e6:5b:13:2f:34:6f:8b:4b:17:25:c5:
61:5f:9a:09:db:fd:b0:d2:f9:1a:7c:3d:fa:eb:a1:fa:9c:95:
c3:8e:38:18:89:4a:52:5e:85:60:cd:b9:58:b1:ac:78:8b:80:
91:da:59:e6:10:93:d1:c9:c2:5b:fb:56:01:6c:df:44:7e:32:
81:17:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:50:42 2025 by rpki-client