Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
File: g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft (raw, json)
Hash identifier: +gHiQtF9QmoufoJs5GQikkNh783eL4CItF8nuAKWBag=
Subject key identifier: 3A:D6:14:98:AE:B3:41:3A:58:83:BA:21:D8:13:6A:78:52:6D:2A:C4
Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
Certificate issuer: /CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Certificate serial: 0197B6A1D83547295D6EBCDF0788765F8B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
Manifest number: 051E
Signing time: Sat 28 Jun 2025 13:02:29 +0000
Manifest this update: Sat 28 Jun 2025 13:02:29 +0000
Manifest next update: Sun 29 Jun 2025 13:02:29 +0000
Files and hashes: 1: g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl (hash: PJzZ9+0qkaESHKwOAoX3ZGnmBV0mEHSs+AEVeOjhpzU=)
2: i_7sQOqEUBCfUKXhCQozAQCgyio.roa (hash: xzt+AxE4W+DPtsBUDajL0GS1rN6Mde5JKYoD1qrRxjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d8:35:47:29:5d:6e:bc:df:07:88:76:5f:8b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Validity
Not Before: Jun 28 13:02:29 2025 GMT
Not After : Jun 29 13:02:29 2025 GMT
Subject: CN=3ad61498aeb3413a5883ba21d8136a78526d2ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:c7:c9:7d:0f:4a:2b:ad:5b:c9:a1:cf:99:
d2:59:17:7b:4e:38:e6:85:a1:02:3d:89:0e:61:92:
9e:b9:f0:c6:db:8c:6c:7e:40:6a:f9:fd:1d:58:04:
64:07:bd:d6:de:72:ae:c0:f9:b2:95:2c:d5:a8:68:
df:b8:f3:3a:3a:4b:53:1f:90:97:6e:ed:a0:f7:b4:
9b:a3:00:34:7f:02:cf:9c:4e:c7:c0:a3:e3:eb:68:
64:97:78:27:0e:49:53:1f:71:32:66:bc:0c:f8:32:
ab:1a:10:cf:28:4a:d9:d7:50:06:4d:36:01:24:e4:
a8:b2:5b:87:47:0b:31:c9:7a:aa:84:d7:c4:25:92:
fa:40:95:0e:7e:a9:33:43:4b:39:8a:bd:c2:10:a7:
5d:a9:a9:1e:ee:1c:8f:f7:56:3d:b9:5d:06:19:9d:
72:89:fd:7f:4f:96:17:ab:c7:13:68:e5:e4:c6:1f:
3a:55:b1:8a:de:38:3e:fc:1a:ff:28:01:12:41:43:
83:20:c4:b0:f0:15:65:94:54:65:e8:50:a3:67:5e:
9a:e7:16:50:81:90:24:89:4b:01:ed:0c:ac:6d:2b:
05:d5:fb:c7:ab:85:19:ee:98:3b:32:35:ab:b7:e5:
00:08:7b:b5:02:6b:02:fc:6e:4b:df:d5:98:1e:4d:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:14:98:AE:B3:41:3A:58:83:BA:21:D8:13:6A:78:52:6D:2A:C4
X509v3 Authority Key Identifier:
keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cd:ba:0a:ab:75:12:48:4f:d6:d1:f3:90:1a:0d:ee:64:15:
b3:ce:8b:57:9d:4a:ba:0f:55:40:d1:4a:4b:31:2f:88:5d:da:
d2:fb:d7:da:88:14:20:02:f7:2a:79:26:a3:5d:0b:f5:3a:2a:
8e:d5:53:f1:f1:0a:1c:89:0b:0f:75:49:ad:a2:af:1c:a6:20:
87:35:2c:b9:1f:b9:bf:6f:95:60:dc:10:c1:95:cc:ef:b6:c7:
ea:2b:30:64:ff:76:3c:ac:19:51:4e:0a:5d:3c:63:73:56:4d:
9d:85:22:d9:64:1e:9b:55:06:77:4c:ad:e4:a3:3e:05:2d:53:
1b:c0:c2:fd:af:06:bc:59:16:ce:58:f9:f0:80:94:81:87:f1:
09:2c:2c:aa:3f:3f:ff:5e:ed:9f:89:c8:de:44:2d:a8:67:7f:
10:26:08:28:dd:30:83:48:bd:82:c1:82:18:6c:ef:7b:a9:c9:
81:dd:6d:47:70:ba:50:ae:85:3e:0b:b7:d8:67:6f:db:10:9c:
63:0d:4f:e1:6e:17:9f:91:1a:48:cf:e6:bd:d1:f8:bb:76:fc:
59:88:1d:98:07:28:7b:3f:62:b2:8b:eb:b9:17:b7:68:fe:32:
fe:6b:ca:df:39:aa:22:ce:aa:f3:ec:0e:64:95:c8:98:f3:7e:
19:45:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:06 2025 by rpki-client