Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: TILDV7aTQJLab69ixiz4eEhBM8NGnkEJzu0r2pboBYE=
Subject key identifier: 6B:88:98:DF:E2:61:07:3A:B6:C1:AB:16:EF:AA:4F:C5:0C:9E:F4:6A
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 0197C26D87110890FE85A94E1428C48EC95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 0397
Signing time: Mon 30 Jun 2025 20:00:47 +0000
Manifest this update: Mon 30 Jun 2025 20:00:47 +0000
Manifest next update: Tue 01 Jul 2025 20:00:47 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: Sp1SH62Mg3wDSmfeT6pudDNCFcc2rbnfoSBjxOk9Ls8=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:87:11:08:90:fe:85:a9:4e:14:28:c4:8e:c9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Jun 30 20:00:47 2025 GMT
Not After : Jul 1 20:00:47 2025 GMT
Subject: CN=6b8898dfe261073ab6c1ab16efaa4fc50c9ef46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:6b:2e:de:f9:e2:ce:68:fb:c7:6b:d5:e6:
19:59:58:79:45:af:db:e2:b5:ca:2b:f8:41:5b:9d:
ae:60:2e:8a:7f:74:4f:30:52:04:01:25:52:26:f0:
e1:ba:b0:5b:c6:48:5f:dc:66:d4:e4:e6:d0:b4:87:
71:3d:c7:34:14:2f:2a:9a:f5:8b:ab:c8:0e:5e:c2:
e9:1c:14:25:06:36:62:a7:9f:12:31:70:7e:7a:a7:
44:da:07:2f:2b:c2:bf:89:6e:09:25:d4:0f:b2:1f:
32:e8:c5:14:f7:ff:5a:ab:22:4a:66:af:55:f5:56:
29:26:f1:47:fb:0b:ec:88:f9:8d:ce:de:c6:f4:69:
cf:b5:d6:01:98:d1:7b:30:8e:a9:de:4e:c2:e0:98:
6a:5d:0d:99:ea:3a:95:50:97:48:99:f0:16:e2:94:
2a:85:b9:c0:ed:1e:1e:16:3a:26:64:0e:49:24:6f:
66:02:90:59:96:8a:af:1e:ef:72:c0:af:f3:8b:ea:
d8:de:91:9a:3e:46:b5:44:c4:d1:c4:01:7d:b7:a4:
ba:bf:dd:06:1d:0d:fe:6d:56:c5:8e:a3:1a:29:07:
84:3f:06:ad:bc:cc:21:1d:45:db:60:02:96:a6:98:
06:f4:78:73:9a:ab:43:f1:f9:e7:1e:2c:40:3a:c4:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:98:DF:E2:61:07:3A:B6:C1:AB:16:EF:AA:4F:C5:0C:9E:F4:6A
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:38:e0:08:4f:23:84:a7:59:dc:20:13:2f:d1:65:53:97:
f8:77:cb:b7:27:6c:2e:59:d8:1e:34:b5:ef:0b:78:c2:48:d6:
19:aa:0a:54:1b:8b:8f:ba:07:e7:8b:a7:9d:34:7a:c7:c0:0b:
74:73:f7:1f:20:85:d3:d8:62:f1:18:e6:5b:c0:6d:d8:a2:1c:
e9:4d:db:fd:4a:ff:bf:1c:68:2e:4b:39:20:d5:45:1f:1c:49:
aa:8b:eb:41:53:05:95:7c:81:08:15:17:a6:30:04:b0:1e:6c:
42:c4:73:a5:a6:eb:45:b1:32:79:f2:eb:94:3c:fe:ba:b8:68:
10:2a:62:00:b2:6d:b5:d9:31:25:62:7a:c0:90:99:43:83:aa:
d1:e4:2d:50:9b:72:dd:29:74:f8:a1:a7:a5:61:0b:8d:48:03:
d1:eb:21:51:6f:5d:93:37:f4:7c:df:e7:75:1e:49:b3:a8:e4:
da:d2:b8:47:03:09:3c:1c:05:14:66:9a:fe:41:34:45:82:41:
e5:36:75:33:71:1e:af:4c:c0:10:fa:df:d7:25:38:54:82:21:
78:b2:7d:4b:00:e8:1b:af:02:03:27:46:98:90:ff:7a:49:24:
1c:64:3c:c5:c7:27:dd:1f:46:b0:26:0c:4f:c7:38:24:19:a2:
13:56:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:08:15 2025 by rpki-client