Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: UADIvavB1qnEst02hwF/XsHL/g7nUR7ZaLCfwngs+HQ=
Subject key identifier: B2:F2:E5:C6:27:28:3D:0C:6F:4A:FA:97:6D:19:96:7B:84:6B:06:F8
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 0197B7B37EE4E8E4B4FC3CF3C8BEF79125C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 0629
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: jTDOeUJM2bErqjvCBzNXEh7JUNhupW/RqfRB5fIfqd4=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7e:e4:e8:e4:b4:fc:3c:f3:c8:be:f7:91:25:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=b2f2e5c627283d0c6f4afa976d19967b846b06f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:04:63:fa:83:eb:42:bf:ac:7d:5f:7c:07:
95:8e:d9:01:85:3c:e4:a3:71:ef:49:73:12:30:5d:
44:8e:c3:fb:cb:0b:d0:6c:b0:bb:b1:f6:a7:ef:8b:
6b:79:01:d5:cc:40:a7:7c:bb:5f:97:c5:a6:6c:38:
ed:ef:11:26:1d:90:22:cf:03:67:a1:e3:e9:56:90:
0a:0a:28:ff:2a:b9:db:a5:aa:f5:e5:80:45:58:65:
42:ad:13:46:29:85:d6:19:8c:ea:c7:81:8d:1d:d5:
a3:23:35:c0:cf:2a:9b:f8:cc:95:13:e9:c5:8b:46:
5e:1d:1d:9c:b9:bc:7e:5a:e6:dc:81:e4:c4:77:dd:
c7:59:bc:c9:8a:c7:87:43:a0:9a:4d:86:e7:45:97:
2c:8e:1e:26:5f:1d:73:c0:44:a2:f2:bd:86:bc:e7:
36:70:f4:3a:6b:ec:0f:c2:75:fc:7e:e3:1d:47:cc:
62:80:6d:cc:b0:e1:5a:57:8a:26:85:e3:42:ee:fe:
20:03:fc:7c:91:87:ed:19:34:57:08:10:14:df:6c:
ba:cc:c9:e5:35:b0:2b:6b:7c:5b:b9:11:90:81:c5:
12:3e:54:ba:f5:b2:4f:b0:38:bb:3e:30:3b:76:07:
1b:2d:b3:3f:d1:6f:98:74:a8:5b:b2:36:8d:c1:f4:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:E5:C6:27:28:3D:0C:6F:4A:FA:97:6D:19:96:7B:84:6B:06:F8
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:69:f8:dd:20:87:3a:39:06:73:16:62:8a:03:d0:fa:9d:
a9:55:34:36:a6:2c:da:62:15:2a:55:cf:3a:05:0d:75:2a:15:
ff:1d:e8:16:33:89:02:a0:4d:9e:5e:cd:f4:a8:68:d1:a1:3e:
72:b1:0c:3e:01:e7:ff:f0:a8:57:c0:3b:e3:f6:06:93:52:82:
f9:a6:0b:a2:a4:59:b4:e6:fc:d8:1d:0f:27:3d:af:bc:1e:2b:
5e:7c:20:f7:6c:81:9d:1a:53:f5:d4:db:72:8c:f5:ea:10:9d:
9e:b0:13:59:28:4a:49:3a:26:26:db:72:3a:d2:e9:70:1a:94:
c9:30:a3:8c:9a:5f:0d:98:c7:1f:2b:1f:5b:45:5e:bd:e4:19:
98:81:fb:2d:3f:96:7a:48:64:03:14:bf:24:35:75:3e:fe:64:
f4:49:6d:ec:f3:a0:e1:a6:a4:7b:b9:bd:14:ab:23:0a:f5:ab:
03:67:63:ff:83:01:07:62:74:41:07:7b:a7:17:a5:bf:06:c1:
c7:98:af:ab:82:3f:c1:22:75:24:c7:f0:07:80:d7:7b:d1:fe:
b3:ac:dc:43:09:80:90:de:3b:ab:0d:48:84:82:8a:e5:33:37:
68:14:6f:44:7d:b1:ff:65:f0:03:c2:5d:17:08:ec:d6:85:b9:
fc:7f:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:04 2025 by rpki-client