Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: 2wSyJcwphJYr8dse0UE6fv5UCNRGCVF+IA7+TAQnUyc=
Subject key identifier: 6A:54:45:E8:51:DB:2D:8D:27:2A:20:7D:7E:65:04:B0:B9:29:02:56
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 0197B6D746531E0176E8B3799573EC086B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 0158
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: g3jlppI7nLZbxtsPmLrY06/a1Av0DDTOjO/mbPxkafM=)
2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=)
3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:46:53:1e:01:76:e8:b3:79:95:73:ec:08:6b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=6a5445e851db2d8d272a207d7e6504b0b9290256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:2f:fd:06:2f:0a:b2:b5:34:59:fe:23:22:
42:07:4f:56:03:37:ae:91:48:a7:60:e0:a3:08:df:
2e:80:13:39:7b:f5:4a:cf:09:00:ec:8e:65:87:e7:
87:38:cb:3b:11:ae:4c:c1:ab:31:fe:89:cc:71:72:
3b:6d:63:25:2d:5e:3d:0a:ac:d9:29:8b:f0:80:09:
1e:58:f7:22:d1:4c:4b:e1:1b:3d:76:a0:b7:06:d2:
39:74:78:ff:43:ac:e4:53:45:71:9f:da:ab:e1:32:
e6:ca:5e:c0:07:d9:35:46:94:dd:d9:c4:f0:7a:65:
67:fc:e2:af:bf:c7:ca:db:2b:62:5c:8d:ec:4f:0c:
4e:f4:fc:33:e9:cc:43:9e:97:89:85:86:61:a4:3c:
1c:9d:72:8d:19:cd:19:d5:4a:3c:7c:06:80:48:f6:
e7:a5:0c:76:34:c9:52:61:7c:44:81:e4:96:b3:2a:
00:f8:10:bb:39:e8:28:77:e1:d8:fa:62:4f:93:cc:
e9:ec:94:aa:4a:b9:39:f3:f2:23:76:24:3f:bc:0f:
5a:48:60:ee:9e:e0:6b:05:28:e4:37:16:8b:d9:5f:
f9:b0:03:61:38:79:a1:b2:0b:4f:83:22:c8:c6:26:
cf:75:2e:a9:42:0d:7d:23:e0:e3:e3:55:9c:eb:88:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:45:E8:51:DB:2D:8D:27:2A:20:7D:7E:65:04:B0:B9:29:02:56
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:33:5b:1a:61:9f:88:ba:62:c1:a1:66:e6:34:7f:c7:7d:d2:
cc:4b:4c:12:07:f0:8f:8e:42:ed:8e:68:bf:82:da:ff:e7:f9:
db:dd:97:60:6f:f2:3d:d4:fd:cb:2b:a4:00:9c:b3:9a:10:58:
68:3a:02:88:76:4e:e4:74:9a:e5:9d:ed:1b:e3:8c:97:2c:e7:
07:b2:c1:db:60:09:9a:55:0e:0e:fd:73:6a:c2:99:e8:21:d1:
42:4c:e9:e1:ee:09:32:e3:cd:f9:99:24:6a:d7:1a:3f:96:8b:
f4:d8:98:5e:aa:55:b4:63:24:69:1e:e6:78:4e:b3:5e:ff:08:
4f:89:ed:87:e9:92:d3:39:d7:6c:5a:c3:ba:1b:4a:a9:b3:38:
b3:e4:b0:1b:46:3c:7a:8c:22:ac:8f:d2:ba:d0:09:1d:7e:69:
41:3d:67:c6:49:ac:f2:91:97:b8:07:43:e9:7b:0f:da:ab:41:
88:d1:27:d3:54:19:bc:05:d1:2b:6a:a5:96:e5:82:64:e0:25:
50:a2:d6:d6:54:d3:b6:09:32:2e:2f:23:a2:b4:13:5e:00:44:
6f:32:54:53:6f:a3:16:31:46:ff:41:47:13:ad:12:2a:b3:47:
2c:a9:32:32:5a:16:94:87:82:71:29:6d:a0:4a:4c:15:56:c6:
e5:1a:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:23 2025 by rpki-client