Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: YRp9p9YbqjAI1xYCt2MKlHLOEdxKvemYGw6udCxiSZU=
Subject key identifier: 84:2B:61:44:81:96:9F:EB:A6:31:06:F2:D3:D8:21:A2:ED:65:E5:99
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 0197B632C583315FE563F5F528D3A0315F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 04CC
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: mAjQWyj1wBrNoIXpjllRcXji1viBJ3qVY59s2uGLUbQ=)
2: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (hash: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c5:83:31:5f:e5:63:f5:f5:28:d3:a0:31:5f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=842b614481969feba63106f2d3d821a2ed65e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:3e:b0:89:f6:5a:20:4a:1d:ad:f5:f1:3e:
1c:49:88:51:82:bf:6b:92:22:b0:4b:02:e3:5b:6e:
9a:bd:72:2f:df:96:e1:42:68:ae:35:2b:ce:90:96:
34:42:f8:85:87:5a:20:1f:de:ce:ff:2e:05:dd:53:
38:81:bf:1e:ff:42:76:91:44:0b:aa:ab:df:60:80:
82:ea:5c:5c:85:82:05:fc:2c:64:d6:34:10:a3:eb:
a9:60:62:59:b7:03:65:e1:80:5d:bc:3c:f6:4b:87:
e9:d5:52:74:32:20:4e:35:09:00:d9:a6:fe:0d:22:
dd:d2:aa:db:a3:e4:53:e5:06:c5:70:80:25:f5:23:
cb:12:17:c4:d1:3b:5b:97:76:7c:0c:b5:fb:28:5a:
2f:b8:1d:24:96:21:b7:83:1f:4c:da:06:a5:3c:62:
de:b8:12:0f:65:10:86:70:3c:ba:f1:d0:35:fd:f7:
d2:6b:4a:e3:96:2d:8b:13:37:2c:d1:f3:03:67:96:
58:10:64:ef:24:d8:b9:f0:3e:95:59:03:a3:82:bb:
92:69:8c:43:ec:93:a9:f7:d2:dd:bc:5b:c3:92:f8:
84:2e:f0:70:21:a0:6d:5e:5c:39:f4:9b:be:7a:c2:
7a:d3:01:7a:2d:ef:16:b5:5a:4a:a2:81:01:ed:58:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2B:61:44:81:96:9F:EB:A6:31:06:F2:D3:D8:21:A2:ED:65:E5:99
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b3:f3:04:87:62:98:fe:c3:c8:d9:75:7a:6b:ba:d6:6c:8d:
0b:10:4c:c2:01:a3:c2:30:ba:74:a3:c7:ab:54:a4:4d:14:29:
39:89:c9:24:60:37:ff:02:55:0d:5e:c6:44:fb:4b:fc:79:9a:
70:b7:2e:9e:ab:fe:85:2b:f7:70:bc:45:d9:d3:7d:d9:10:93:
68:e3:0b:99:c4:2c:6d:ee:23:5d:f1:5b:f0:b0:1e:88:66:da:
d7:61:da:d6:27:d0:e0:84:c2:94:b4:68:f8:3e:a2:c7:fa:a5:
8a:a3:4d:b3:61:e7:71:29:09:ee:a8:ad:d6:71:13:6b:5b:cd:
70:60:02:57:9f:e2:b5:f5:80:cb:7b:8f:29:92:85:de:e9:17:
ae:50:2f:59:43:ce:56:31:e5:8a:c6:c6:44:08:17:cc:8d:17:
3b:e1:7c:cc:5a:2d:56:c6:4a:ca:82:75:15:2e:76:92:59:7f:
f2:14:f5:c9:7e:11:40:98:fd:4c:d8:6d:8e:55:ed:00:a2:f3:
02:e0:e2:b4:44:a6:e5:2b:85:02:29:27:6a:c5:43:4b:6c:82:
ec:e7:89:1e:d0:20:87:3c:f9:3c:ea:cc:45:42:61:19:76:09:
a4:1a:67:4d:79:fd:9c:d4:70:d8:4e:3d:b3:03:41:2d:82:ec:
01:85:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:30 2025 by rpki-client