Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: xgtw1foGewUaOq0dsp+QvlnNJpXWJzIFFhbiK9yj9YQ=
Subject key identifier: 48:96:37:F6:05:0D:F9:D5:7F:C8:89:DD:21:04:94:8C:CC:B7:18:E7
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 0197B82123ED8189273B8E35BEA69778FEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 1111
Signing time: Sat 28 Jun 2025 20:01:08 +0000
Manifest this update: Sat 28 Jun 2025 20:01:08 +0000
Manifest next update: Sun 29 Jun 2025 20:01:08 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: ++/Kn48A/pychy22syTgZFRb3T8N+qISH/tYKIcpQw8=)
2: iVs53h_YZF7aBqVA1FOf0up1OVA.roa (hash: UW0lfLNzDTQsdkpmCT+L1fh8JEZx2jiYpIhhq1q1Nsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:23:ed:81:89:27:3b:8e:35:be:a6:97:78:fe:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Jun 28 20:01:08 2025 GMT
Not After : Jun 29 20:01:08 2025 GMT
Subject: CN=489637f6050df9d57fc889dd2104948cccb718e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:91:db:4a:32:63:70:9b:d6:0c:e9:eb:60:
5a:1c:de:bf:88:d9:f9:03:d1:32:58:c1:f5:13:b2:
a1:b5:6e:26:91:99:91:01:a6:01:b5:4e:ab:9b:52:
86:d2:40:3f:69:24:f5:f8:93:fa:94:81:78:10:17:
4e:81:04:b8:45:18:f4:07:a1:c1:ec:e4:21:15:33:
61:75:4b:0a:06:ab:30:8c:ed:b3:69:e7:c6:9e:86:
0e:5c:d1:a1:1c:8f:9e:ff:2e:3b:eb:d5:3a:c0:a2:
36:2c:22:40:71:54:78:47:3c:86:9a:b6:62:99:00:
95:fa:1b:ea:3e:ba:49:e0:1c:e9:5f:cd:b6:ea:f5:
7d:93:e7:10:a6:e9:5e:0f:b1:f6:55:ca:81:df:1d:
cd:a0:e6:6a:76:65:ff:50:12:8c:f3:83:ad:4a:b0:
66:33:a9:ba:02:30:17:47:e4:30:8b:fa:aa:5c:cd:
02:ee:71:24:63:71:eb:e0:09:41:87:af:de:ac:27:
18:c2:a6:b5:61:05:48:b2:0d:46:4f:a5:8b:85:e9:
7c:4d:49:59:2d:af:9c:84:3c:9c:c1:7f:56:22:11:
5d:4d:76:01:68:e4:4b:68:c1:00:16:01:c8:49:5f:
9e:43:e7:3a:61:0a:ad:9f:2c:91:ff:d7:25:d4:38:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:37:F6:05:0D:F9:D5:7F:C8:89:DD:21:04:94:8C:CC:B7:18:E7
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0c:c8:a8:c7:d3:fe:a2:da:e5:ac:c4:a1:14:61:7d:81:e4:
1b:58:9e:be:d5:17:cb:ed:fd:cd:f2:80:6f:ad:a6:8c:a0:28:
52:6c:91:5a:62:ce:2d:e3:10:63:ce:3e:50:dc:59:36:9c:76:
22:66:bb:67:5f:fb:e6:92:90:28:02:86:88:21:79:aa:d7:ae:
4c:d0:78:44:02:71:dd:fb:ff:9e:2c:39:87:3b:bb:9f:46:99:
ca:84:c2:38:da:f2:59:f7:80:1e:9a:be:f2:04:0b:ef:f5:90:
0b:d6:36:82:15:62:c9:c1:ee:59:3b:52:99:e1:00:9e:16:65:
84:93:74:a2:88:4b:90:0d:07:c3:2a:73:84:83:d3:c8:d7:bb:
24:08:68:18:0a:91:f7:29:26:51:f0:e0:71:bb:fe:4c:ac:26:
7e:88:0e:39:56:55:ef:31:3f:dd:3e:8e:ed:3a:5f:db:8d:27:
03:6d:0a:c9:bf:6b:98:a6:5d:ea:da:88:e3:cd:0e:ec:9b:be:
69:0d:57:30:5f:1c:70:7b:c4:bf:2b:bc:5c:89:ac:1c:cd:3b:
5a:8d:ba:42:4b:77:17:3b:ba:a6:70:38:07:94:dd:a1:45:4c:
17:8d:7f:2e:b7:5c:3c:82:1b:ba:d8:70:1a:e8:20:4d:b4:03:
17:78:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:11 2025 by rpki-client