Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: /eoYnyYk4V65v9AV+qdTGp/szSgoloQ/11TNpGBseF0=
Subject key identifier: 63:18:E1:5B:AB:1D:C6:C7:2F:88:50:7C:38:BB:60:7E:C2:CE:D2:AD
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 0196BD4931EAF2F6C28AEE2682E3D3A503BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 0FE7
Signing time: Sun 11 May 2025 03:00:12 +0000
Manifest this update: Sun 11 May 2025 03:00:12 +0000
Manifest next update: Mon 12 May 2025 03:00:12 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: y+DHmbiHVod0PQHhY2KJUBp7wFahMpFyswWPfq0rWIA=)
2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:31:ea:f2:f6:c2:8a:ee:26:82:e3:d3:a5:03:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: May 11 03:00:12 2025 GMT
Not After : May 12 03:00:12 2025 GMT
Subject: CN=6318e15bab1dc6c72f88507c38bb607ec2ced2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:e7:30:3e:90:75:6a:ea:2b:67:da:64:de:
e4:c1:79:68:d3:d2:7a:82:89:2a:cb:4e:df:cc:c9:
e8:52:91:23:9a:c9:c9:cb:eb:53:f1:9f:41:43:95:
43:25:fd:09:33:52:19:69:87:42:a3:ad:cc:70:79:
c4:63:21:04:84:53:f9:90:3d:88:a9:24:7f:b0:f1:
c6:d4:dc:65:17:d4:15:d4:10:46:45:8f:6d:60:e4:
73:ac:22:ec:58:74:c2:49:7b:f9:a7:cd:d4:fa:65:
f0:bc:86:10:6c:6e:4f:fe:48:90:11:df:56:b6:07:
ab:4d:01:42:d5:16:de:08:ac:9b:ca:4d:de:8b:11:
a6:d1:ca:48:ac:79:ed:99:5d:c8:b9:14:77:65:cb:
1c:a9:83:2f:5b:ec:29:14:06:5f:82:0d:29:bd:0c:
78:fc:41:65:4a:16:5d:ca:0e:36:af:07:12:04:b3:
74:8f:39:0b:80:ba:4b:51:67:25:a4:ee:7a:8f:c2:
2c:8c:82:1d:7a:a9:6e:65:fa:d3:06:99:7c:53:c8:
82:7c:ee:96:ef:7f:0c:11:d9:06:7c:52:a5:f0:14:
1b:78:0e:28:28:cb:fe:49:72:4f:08:35:a7:90:e0:
a9:6a:9f:e9:ed:97:b6:06:70:19:86:70:58:ce:dd:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:E1:5B:AB:1D:C6:C7:2F:88:50:7C:38:BB:60:7E:C2:CE:D2:AD
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d3:d9:13:e8:35:71:8c:70:44:04:c4:00:47:0e:46:39:07:
da:d8:02:f0:10:a9:21:1f:7c:69:ec:8f:8d:15:79:ca:26:7e:
4d:d3:4a:35:38:e9:27:22:51:17:7f:09:2c:12:87:18:47:cb:
3f:71:6b:2c:e2:fe:0d:43:fd:e9:b0:56:37:4d:8b:4e:94:6a:
00:90:ba:65:24:45:b5:64:2a:8d:a4:e7:9d:ba:91:9f:1e:7b:
9d:19:cc:67:5e:ec:d3:b4:12:07:de:6f:7e:1f:82:f4:9d:01:
25:f3:24:b1:dc:62:a1:a2:a5:77:52:6e:a3:44:e5:f8:9f:27:
9d:c2:63:b7:f4:81:88:17:9f:23:54:49:10:cf:46:d8:fa:98:
b4:db:3a:4d:f8:8e:d4:aa:f7:1f:7d:25:32:00:b5:98:55:d7:
46:68:ac:29:d2:88:6c:e4:9c:4b:08:16:d9:fe:9a:84:aa:59:
fa:3d:f8:02:64:68:0c:bc:8c:42:98:bf:09:33:5c:03:70:70:
71:1e:4f:70:59:d8:32:77:6b:10:4c:c3:6d:24:e3:0f:0c:50:
95:85:87:b9:3f:49:93:d4:cc:ba:1e:5d:07:cf:98:fa:d7:07:
8a:6e:75:ff:f2:3f:51:8b:39:d9:a2:63:cc:8c:e4:91:bf:03:
80:dc:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:36:39 2025 by rpki-client