Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier: cI2T67FfqoO19PR2LR2BGGO20H/6G1hlFGUPmxs7/88=
Subject key identifier: E5:CC:76:20:36:19:D0:C9:AE:7B:45:29:CA:BA:2C:4D:42:96:11:03
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 0197B6A173B2ED1012A521715603FAE7D1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number: 03A0
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: xf83tOBhVUPRkTK6wGnTE828nM3Y7A7tdMzjsmwjq2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:73:b2:ed:10:12:a5:21:71:56:03:fa:e7:d1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=e5cc76203619d0c9ae7b4529caba2c4d42961103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:d2:46:2b:a9:d0:ec:96:37:32:20:8c:78:
f1:b9:59:70:af:6d:f3:60:3a:e9:19:b2:a8:eb:08:
90:07:89:b3:48:4f:6d:1b:9f:8c:e9:d1:e1:91:ce:
e9:80:5e:03:e9:34:38:d8:73:b1:b4:91:f1:aa:e2:
af:0c:90:d0:49:07:e0:72:94:42:86:c6:08:a1:56:
5b:cd:b5:a6:26:f7:ae:9f:01:5f:85:72:c0:a0:b8:
c4:ec:3c:19:e2:00:c1:5b:40:c6:64:3f:92:0f:44:
41:17:1d:54:bc:fd:ae:5e:96:5b:3c:09:3b:c5:b8:
cf:d0:d5:8a:af:69:14:20:8c:13:21:30:c9:a2:c8:
e0:fa:42:a1:7d:9f:4c:57:39:05:2d:ed:22:0b:46:
20:5c:75:d8:38:c6:ca:c2:de:41:76:f5:b8:6b:43:
28:f8:bd:3b:11:2c:4a:73:a5:78:b7:71:88:7c:36:
19:f0:70:9a:3e:ed:32:a6:67:a6:82:2d:11:5f:d7:
d1:e4:a7:aa:98:38:2a:ec:97:2d:29:9f:65:2e:e6:
b5:fd:1b:6c:4b:91:db:a1:ca:1b:b7:48:8b:e4:09:
8b:14:24:47:89:2a:82:b8:59:58:b0:72:68:65:c3:
da:b7:b5:78:12:72:44:c1:fa:0e:ad:9f:d5:a7:8c:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:76:20:36:19:D0:C9:AE:7B:45:29:CA:BA:2C:4D:42:96:11:03
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f2:67:b6:39:c8:20:7b:dc:82:bb:bc:e0:39:f5:6f:13:43:
04:68:ff:57:da:6f:b0:24:b9:1d:64:0a:26:ed:ff:6c:42:e8:
5f:e4:6e:d5:a5:75:2c:c0:78:a1:82:1e:7a:64:f1:47:95:3d:
37:07:52:cf:7b:38:e2:e2:89:51:9b:43:d5:2c:36:68:f1:0e:
75:e5:08:c5:5b:c1:f5:f9:1d:4a:6b:f5:4c:f1:80:14:6f:c3:
fa:b7:19:f4:16:89:ce:c5:a1:03:f4:c4:66:ad:d9:a9:c5:28:
6f:8c:dd:eb:8f:f8:7a:cd:9c:24:ef:1a:d1:50:4f:f1:cc:36:
77:aa:8f:ba:18:83:43:09:e0:97:e0:86:03:ab:36:0d:3e:c8:
4a:fe:6c:9d:bf:cb:71:23:72:62:e8:2b:da:57:54:38:90:af:
c8:73:0f:81:55:80:20:c7:16:a9:33:3d:ee:3d:36:ed:f2:70:
30:4b:0c:b7:a9:50:4e:d0:13:b1:25:4f:ff:1f:65:de:77:3f:
21:02:b5:5a:a2:c5:ff:32:22:7a:10:23:c2:0a:43:ca:73:0f:
53:38:2d:d3:63:9b:2d:95:15:13:b5:6a:c7:fb:6d:e9:de:31:
e5:3e:88:8c:8b:47:05:47:9c:41:1a:7c:e3:5a:6e:8a:57:cd:
55:1c:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:56 2025 by rpki-client