Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: dlfy1V8KWqFwOCaGdNESmnoBJPb7yBxVU/tSklT3FHo=
Subject key identifier: F3:AE:E6:46:98:B5:F6:78:34:D3:7B:C4:D1:27:F2:8E:FF:E1:C4:D7
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 0197B9344158DBE1CCAE73AF3FEEB8BE1228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1548
Signing time: Sun 29 Jun 2025 01:01:38 +0000
Manifest this update: Sun 29 Jun 2025 01:01:38 +0000
Manifest next update: Mon 30 Jun 2025 01:01:38 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: N8XsKCu+AG7hSLhoVlRat910sEswCn6xxem7Ic+1lvU=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:41:58:db:e1:cc:ae:73:af:3f:ee:b8:be:12:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jun 29 01:01:38 2025 GMT
Not After : Jun 30 01:01:38 2025 GMT
Subject: CN=f3aee64698b5f67834d37bc4d127f28effe1c4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:47:ab:25:65:b3:08:91:1d:89:d3:a8:00:
19:2e:56:9b:ce:95:b3:84:9d:79:08:fc:6d:94:54:
e7:94:82:ad:93:dc:79:64:5a:58:5f:72:b7:2b:bd:
6f:7f:02:6a:54:67:29:79:21:dd:05:a1:1a:04:b2:
ca:10:63:28:a2:fb:43:9a:3f:06:30:21:fc:6c:18:
1b:7a:59:d9:e0:26:8d:5c:24:ce:99:59:cd:6c:fb:
a1:86:25:1c:19:db:fd:7d:8e:c1:04:de:03:fe:0d:
55:3d:5c:b8:1b:4d:e3:0e:19:24:85:16:a3:8b:de:
23:4f:45:c7:68:fa:54:17:37:ef:87:c2:1c:1e:71:
c8:36:9c:a7:98:55:3b:04:40:03:8d:7d:5b:12:3d:
55:e3:20:03:6a:74:ba:15:c1:71:94:c6:49:61:7f:
d9:38:5b:b7:65:48:7f:c1:5a:96:92:1c:ce:9e:41:
9b:ae:92:0c:2a:ac:ea:17:12:7b:ac:a5:00:91:18:
1f:14:42:0d:94:80:10:72:57:e9:f5:c0:e9:ad:f8:
50:89:6f:95:29:75:c8:59:53:7f:4c:5a:9f:eb:87:
ba:82:fe:80:dd:c2:8f:50:df:9f:e1:45:b7:5a:6d:
21:05:10:f3:d5:80:8b:da:bf:42:d7:70:5f:6e:05:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:E6:46:98:B5:F6:78:34:D3:7B:C4:D1:27:F2:8E:FF:E1:C4:D7
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:71:6c:12:cb:ca:ea:f8:cb:b3:20:ba:58:07:d2:1b:79:67:
5d:98:44:cb:e4:8e:36:64:9e:a5:af:ac:d7:78:7f:c8:cd:13:
60:f0:82:cb:e8:d4:4c:ba:ed:8f:35:13:0f:89:56:57:1a:7c:
0f:ef:cf:df:df:79:58:fc:1e:45:7e:f7:44:ff:1e:97:9f:ca:
ed:b0:1d:a2:51:4b:92:d8:5f:3e:32:85:d0:6f:f6:03:9c:07:
44:58:55:b1:67:38:19:2b:77:6b:94:15:c8:43:1c:d4:c9:27:
1a:a1:2e:5a:5b:12:f8:28:65:21:d0:cd:58:fc:8e:37:f1:b2:
c1:a5:76:fa:9c:78:b4:ba:1b:4b:d8:6b:d1:89:1d:ec:60:93:
32:e7:c3:b8:39:45:72:e3:c9:71:d3:bd:7c:9a:92:42:c3:be:
6c:a7:3d:83:c6:ed:39:96:6f:70:da:ac:2c:a6:bd:43:f7:d1:
49:e7:20:96:32:49:b9:ad:1d:6d:68:60:ff:1e:36:20:64:7a:
03:b5:48:a4:f1:78:c7:63:78:81:90:ca:f3:de:b4:c7:10:d1:
61:c3:d7:ab:00:9c:3d:96:af:b4:e9:3c:71:44:cf:41:9c:16:
a9:e9:14:4b:93:8e:bc:bf:ae:72:21:b4:68:a0:07:ab:05:0f:
80:43:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:36:13 2025 by rpki-client