Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: YkT6hsQ9uQCRRxugivXxnTTDvvwDBgC4Gi018N+b7Vk=
Subject key identifier: C9:3B:45:C3:A1:39:11:9A:3D:C6:EF:BA:29:41:D6:C3:10:CA:A1:D6
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 0197B7EA953A0E2EDA135B2E89EDAB9E89AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 11AF
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: 6foYYRcYRf6yGt73m3GPWRtAaJuIUhGwdsWEgmf+I8A=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:95:3a:0e:2e:da:13:5b:2e:89:ed:ab:9e:89:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=c93b45c3a139119a3dc6efba2941d6c310caa1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:9f:d4:b2:aa:c2:24:7b:78:3e:c6:97:3c:
06:47:a0:3b:32:81:c9:48:5a:6a:60:c0:fb:6b:8a:
a9:68:c0:22:91:b0:60:08:b0:9d:0e:73:a8:3f:53:
ae:16:83:6e:a9:17:23:7a:a6:05:40:8f:43:f1:9d:
ae:21:cc:58:a5:91:d6:66:70:db:5a:79:65:3d:a5:
60:86:7b:34:03:35:14:2f:bc:96:ad:f0:1d:f9:66:
6b:4e:40:b7:2a:0a:03:14:30:63:91:e0:48:32:62:
84:58:fc:00:96:73:8f:95:41:67:3d:04:e4:ec:0d:
98:a9:d3:f1:2a:b9:93:12:87:35:54:88:55:b2:31:
3e:51:31:76:4c:16:f9:76:15:9c:a9:85:43:05:2b:
20:39:fb:5f:cf:a9:b7:56:c1:2a:95:ab:2c:81:ad:
ff:a8:15:d5:ae:8d:aa:b4:ce:b9:07:9e:52:dc:27:
74:2a:a8:19:10:cc:c0:70:e8:e3:d1:01:ab:f6:61:
89:c8:fc:bc:4d:40:f5:e8:26:08:3f:07:f5:fc:8e:
27:09:ea:48:13:06:1b:5f:aa:20:89:49:f9:ab:02:
20:25:8c:6f:42:2d:0e:da:74:9b:d4:95:55:8e:17:
dd:42:de:ac:bb:07:97:d8:92:23:24:44:e9:04:0e:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:45:C3:A1:39:11:9A:3D:C6:EF:BA:29:41:D6:C3:10:CA:A1:D6
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:52:ee:a4:40:62:08:11:6d:dd:70:db:d0:61:42:93:c9:9b:
fa:7f:55:20:85:aa:49:c4:cb:46:d5:7f:21:da:9a:26:8d:d0:
bb:e0:70:21:e3:e8:c8:43:0f:ef:f4:23:6a:14:e8:ca:a9:5f:
84:5e:0c:0b:a2:47:a1:66:7a:79:53:ef:54:c7:99:b4:eb:10:
ef:8b:4e:11:55:79:b6:95:84:e8:26:a5:d2:c4:02:5c:31:27:
a9:c7:22:73:ad:64:82:23:d5:c8:07:0c:37:75:00:05:cd:34:
b5:0d:0c:de:00:26:a5:80:d1:94:b7:4a:16:68:ff:14:87:a0:
27:05:72:c1:a3:7f:b5:3e:3b:8c:cb:e7:15:94:12:b6:9e:cf:
f3:02:7e:a8:84:1f:54:e6:3e:6a:8e:67:b4:02:f3:f4:75:b8:
54:cd:af:73:a0:82:0b:e1:26:82:d2:45:84:39:15:e6:05:3e:
40:99:e8:37:6b:fc:98:12:65:88:17:e9:ae:41:88:5f:8b:49:
03:b4:3c:7d:a8:94:c4:db:a2:7b:fc:3d:77:91:b8:41:e0:aa:
a8:6a:6c:65:8e:e7:ce:c4:ab:f8:25:5d:6c:32:2c:43:ad:ec:
2c:af:e2:bc:7c:98:7b:93:51:47:41:25:53:65:5b:63:6d:f9:
24:8e:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:30 2025 by rpki-client