Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: BylIjfZe91hZ+u7wTslnkQl52ZMYyMNwBFcfWOLunnI=
Subject key identifier: 24:99:D5:84:B8:9F:D4:74:90:96:08:5C:6B:08:F5:B6:59:72:60:B3
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 0197B6A22721E83C0C153EBFD3135E71579E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: C8
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: np4bzKe2F905GNQtr/MrNN8Sa8gA4Fx9h7jRHaElVyM=)
2: Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa (hash: DFoP5Rp4yqWzaWfGAIFOGX06a0KJXff63tIBuI2st8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:27:21:e8:3c:0c:15:3e:bf:d3:13:5e:71:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=2499d584b89fd4749096085c6b08f5b6597260b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:34:63:25:c7:81:86:d5:05:5c:09:93:07:ca:
35:c3:d8:b9:a5:65:ae:d2:93:fe:28:08:1c:08:0c:
3f:5c:60:bf:aa:63:bb:84:60:87:c3:fe:1d:cf:e1:
29:98:7e:16:15:4a:66:2d:0c:7c:be:79:fb:fb:66:
84:e2:62:1a:b7:7e:43:55:7c:7f:c5:07:a5:91:14:
51:af:c8:e0:3b:aa:d8:33:15:55:66:c4:11:2c:6b:
84:fb:41:37:40:2b:a7:08:d8:8c:fc:21:08:1a:b7:
20:ff:a9:98:21:77:14:f4:4f:72:fa:20:db:9f:8f:
54:a6:b9:de:7a:d3:4b:0b:be:71:19:30:2c:f2:e0:
47:2b:d2:10:ee:16:c5:4c:f2:d3:77:c7:6d:4a:99:
77:a3:71:95:35:40:95:f3:f9:9a:40:19:a7:bc:94:
fd:d2:bd:bd:93:60:e7:17:f6:73:7a:01:60:d4:e7:
bb:0d:0c:f5:70:88:db:80:cd:79:2f:84:8e:8a:89:
1c:fd:ff:e9:d7:5e:77:27:dc:ec:a6:1b:4a:36:43:
db:33:58:15:e3:c0:ed:f6:82:31:26:af:16:58:f4:
c8:7e:7a:d8:8e:f5:ce:39:38:11:ae:e9:2b:25:7b:
eb:eb:e3:c3:d6:61:89:3e:22:93:23:35:ba:33:0e:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:D5:84:B8:9F:D4:74:90:96:08:5C:6B:08:F5:B6:59:72:60:B3
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a2:02:b5:7d:e4:52:96:2c:03:66:11:40:61:8b:7e:4f:4b:
a0:de:a6:78:db:fd:85:dd:36:71:95:9d:29:71:b9:8c:27:40:
80:bf:5b:ca:78:f1:dc:e1:1c:73:b5:06:37:54:8f:5b:f2:6f:
1c:17:75:ee:c8:1c:91:17:87:75:52:bc:48:a0:52:15:83:16:
e6:02:9f:41:94:a6:72:eb:2b:ba:ea:5e:ba:65:72:7a:3d:f6:
c8:53:ed:0e:77:4b:f3:b2:5a:97:57:b2:f6:60:fb:fb:56:0f:
68:68:54:f1:ab:eb:cd:e8:a7:6a:0a:e7:74:33:dc:16:88:21:
21:4d:07:11:e7:30:15:bb:d2:2c:e4:4b:88:e4:96:b8:31:37:
18:55:d2:bf:57:81:f6:1c:15:e5:f5:88:b9:8d:f5:6f:23:79:
d9:40:65:70:a0:cb:4d:7b:db:8e:69:c6:c2:c0:48:a9:38:1d:
81:e6:04:65:2b:56:44:79:55:52:1a:47:8d:40:4e:1c:f3:c8:
46:ed:92:7c:e0:14:a2:fd:37:e2:f6:92:2b:9b:ed:45:78:42:
fd:f3:e0:27:e6:a1:14:3a:84:c1:f7:28:74:b5:cc:cc:34:df:
4f:42:8b:28:9f:44:ed:50:51:19:83:90:a8:79:d8:da:47:ff:
90:e5:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:48 2025 by rpki-client