Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: tWZEQ9DpQbTTk2Ob9KL679yl4uGGJWC3jG2h3uiVHj0=
Subject key identifier: 32:B2:C3:07:ED:28:E6:3F:36:6F:70:15:10:30:42:66:85:F5:AA:A1
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 0197B89040014D2D6C69B8C6B296509EBD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 093A
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: RvnCUix5rpIYKvQJrS0coniEAlCgNEOj+XWGbJFE7m4=)
2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=)
3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:40:01:4d:2d:6c:69:b8:c6:b2:96:50:9e:bd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=32b2c307ed28e63f366f70151030426685f5aaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:db:f7:6f:ae:30:25:df:5d:c7:23:f8:48:
7d:8f:e6:aa:f0:97:86:e5:1b:f8:5a:d3:76:cc:85:
02:62:a3:48:aa:0e:f1:40:8d:97:0e:fa:fc:b4:10:
58:0a:5c:11:a6:fc:be:13:54:12:0d:4b:a8:81:f9:
fb:2f:e5:d3:e3:84:ba:29:b4:97:9b:86:06:a4:1e:
de:64:f0:75:c5:c8:e7:24:bd:7c:70:ac:bf:f1:5f:
f1:a7:74:03:b8:17:d4:22:6d:9c:8d:64:e2:9c:4e:
bf:9d:c0:82:9f:c3:b2:58:10:fb:c4:d9:3a:25:c1:
92:18:22:a3:cf:b8:74:55:cd:41:3e:1b:8c:5c:29:
7d:2b:ed:c7:a8:b3:11:e7:dd:37:81:01:4e:20:b9:
8c:1b:d4:bf:2f:58:83:0c:5a:05:f5:0d:df:c2:e4:
13:2a:63:b3:0c:2d:e6:1b:75:ee:0b:70:6e:61:e1:
11:4e:90:4f:d0:e4:37:27:6f:f7:6e:56:b3:a6:c2:
23:93:77:74:cb:59:42:6f:5d:38:85:31:da:e7:e8:
cd:74:f8:4f:1d:a0:c1:17:5d:45:84:e9:fe:58:9b:
e2:a7:8e:bc:01:7d:6e:6a:d1:07:eb:e9:b7:65:c2:
93:0b:44:24:6f:df:ac:c0:98:50:c0:2f:d7:ae:13:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:C3:07:ED:28:E6:3F:36:6F:70:15:10:30:42:66:85:F5:AA:A1
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fb:f1:8b:7c:ba:d9:eb:b4:65:8a:e6:6e:19:34:0f:f9:ac:
e8:70:fb:29:32:55:78:bf:a4:5e:23:fb:05:bf:97:6c:11:fa:
80:49:b3:5d:d8:56:57:ca:d7:af:a0:c1:4f:4f:b3:c8:65:86:
d6:32:81:45:5a:22:9d:4f:38:cd:15:bb:ac:f7:77:2b:2a:fc:
5d:ec:c9:ef:27:76:2a:e5:41:3b:3b:8b:dc:f7:21:c4:07:de:
51:fa:10:95:3d:93:28:3a:46:5f:8d:ee:d1:78:e2:c0:0a:c5:
95:46:d7:a8:61:8e:63:08:74:dd:ff:f2:e9:6c:04:9c:0c:a6:
23:7b:55:df:43:6b:f6:4c:dc:e2:77:e9:41:27:dd:da:2d:d5:
e7:4b:46:8d:f9:df:3f:18:83:ed:13:18:17:c7:8b:71:16:a2:
75:b7:14:49:58:96:da:3a:7d:fc:8b:4a:f2:7c:3c:9d:3f:0c:
b0:da:5d:bc:d0:5a:ac:5c:7a:03:5e:67:3f:63:9d:24:81:3a:
2f:8f:80:d8:d9:4c:c9:b8:98:64:fa:13:b3:51:ff:97:e1:27:
2f:40:61:b8:11:24:0f:d8:d1:4c:62:dd:19:14:66:e0:3e:70:
68:e7:fc:a3:69:2b:3b:80:46:01:3b:a7:c0:f2:b5:e8:16:3d:
55:58:1f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:48 2025 by rpki-client