Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: Ne2V5Q77F8044ZHYckovSRTMKMBb7XO2jo6y5HvTLKc=
Subject key identifier: 31:97:F2:25:39:10:CD:C9:D0:3A:15:EF:AC:3B:BC:38:8A:AA:60:77
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 0197B70EE4A224CC3CC4A3E0E827D6FA53CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: 9aqRMdVDyVssDcEHzUEVIh56CYktaFzZyVOrw8LXaKk=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e4:a2:24:cc:3c:c4:a3:e0:e8:27:d6:fa:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=3197f2253910cdc9d03a15efac3bbc388aaa6077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:46:98:65:4e:cb:6c:85:63:f5:85:d4:97:
34:b0:db:d6:91:81:c7:26:11:5e:74:6b:e3:16:7e:
4d:3c:d0:92:25:13:73:87:9c:87:00:be:7f:3c:61:
f8:2a:17:0a:c8:3a:31:9a:bd:1f:6e:fa:5d:08:8d:
04:76:17:fd:8a:17:49:06:cc:ff:6b:d6:d2:f1:c7:
ed:ba:5e:1c:18:e3:29:8b:06:e9:fd:f1:f6:11:6e:
e4:b1:5e:5e:f1:88:2d:f5:3e:0a:17:33:38:33:42:
94:85:79:32:3c:6c:f0:07:2b:62:fd:f6:10:c5:dd:
2d:c4:03:3d:bc:18:73:a2:c2:8e:c0:be:2f:be:15:
40:25:03:ae:e3:26:9e:a5:96:f2:37:73:c5:61:38:
b6:ac:69:a9:30:1d:17:45:c7:e3:ff:55:0f:d8:10:
ac:fd:36:9f:e6:76:8c:e8:5e:99:f2:bb:26:f8:54:
ce:fd:28:18:27:88:b6:00:d3:be:84:10:e6:de:6e:
3e:c0:a1:53:ff:91:8a:9f:22:60:f3:24:69:9c:47:
ed:f2:24:60:aa:34:0d:5c:29:7e:fe:d0:35:2b:ba:
db:0c:d8:82:4c:2c:89:d4:f9:d7:80:91:3e:5e:96:
f1:f3:9b:5b:fb:8c:34:b3:9c:9c:cb:94:1c:4b:dd:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:97:F2:25:39:10:CD:C9:D0:3A:15:EF:AC:3B:BC:38:8A:AA:60:77
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:88:8f:8f:11:e2:da:1c:d1:a4:f4:e8:46:a0:99:fa:29:9b:
aa:10:2a:8c:f9:a8:99:c3:55:d4:61:2b:3e:ed:3c:3f:1c:25:
11:49:ce:7d:6b:b5:1d:9d:88:38:51:3f:17:ce:d0:14:ff:38:
5c:f7:5b:0e:f8:d7:37:bd:17:f6:6c:32:89:f8:88:f5:c3:4e:
bb:20:e5:bb:64:a4:db:8a:8a:fb:a1:c0:0d:61:3e:d5:10:ea:
0c:4e:25:63:eb:8e:7f:ec:52:8f:47:31:3d:01:a6:45:d0:4e:
ce:93:c2:46:35:b6:3b:22:c7:2e:b3:6b:68:c8:07:f8:d4:63:
0e:23:91:54:50:51:92:3a:ad:53:e5:b2:00:39:e2:f1:ab:29:
dd:0e:fa:20:7e:42:9b:af:0b:09:d1:4c:50:93:0b:33:c2:2b:
2e:e5:fc:6b:ee:83:78:5c:9d:59:9d:60:f8:9c:3a:a1:11:23:
e8:75:f8:f0:1b:e7:73:c8:b5:5e:54:82:70:25:81:b4:91:4c:
3e:ac:37:da:b8:1b:b7:54:52:7b:22:8c:9b:01:e6:71:f3:c4:
13:8a:10:e0:33:40:e0:e1:4f:73:ac:19:b1:86:22:02:91:b5:
57:ca:47:64:7c:84:de:21:ff:fe:b5:67:f0:08:43:03:72:23:
0a:07:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:05 2025 by rpki-client