
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: wyZLSAo2bNFZXfFqc4BCAk7idSFPWA33MQdfaCem0DI=
Subject key identifier: AF:C7:11:35:84:2D:B8:18:E8:B2:E5:AF:AB:52:86:80:EF:E2:59:F4
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 0196AB43190CD0660FAC18D6E46E9631474E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0700
Signing time: Wed 07 May 2025 15:00:23 +0000
Manifest this update: Wed 07 May 2025 15:00:23 +0000
Manifest next update: Thu 08 May 2025 15:00:23 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: aV4II9Bk/K8o9Ar7MTQSrcY7gNfXnSAhjmvOx6bMx3I=)
2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:19:0c:d0:66:0f:ac:18:d6:e4:6e:96:31:47:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: May 7 15:00:23 2025 GMT
Not After : May 8 15:00:23 2025 GMT
Subject: CN=afc71135842db818e8b2e5afab528680efe259f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:78:03:06:6a:a5:8b:b0:0b:cb:f0:9b:af:
5d:71:5c:20:51:ef:43:fa:1f:5c:a6:2a:fb:e2:bc:
7d:6d:69:62:2a:9f:66:b7:e7:7d:aa:1a:40:b6:77:
4e:ad:ab:bc:d2:d0:20:a9:62:ba:f9:68:f9:c9:36:
6d:1f:ad:c8:ff:31:8d:7a:18:6e:8c:9b:e1:12:66:
e2:ef:80:22:68:d9:54:cf:df:77:13:a2:ad:ad:53:
7b:59:48:eb:61:9d:e8:65:c2:b6:46:ec:4a:cf:1b:
81:e6:f6:83:b0:53:72:73:e7:9e:fb:b7:dd:2e:2f:
64:5f:2b:4c:56:65:3a:28:e6:7c:bd:71:c1:c2:86:
a9:69:e3:04:d4:9d:84:be:de:c7:da:33:39:ad:17:
75:8b:0c:62:9e:89:5c:78:ef:24:2e:a8:ff:a0:7f:
f3:27:8b:aa:ff:1b:5e:2f:b9:3a:83:fa:7c:04:db:
a9:21:83:0d:9e:3e:cd:f9:ee:11:88:a2:9e:83:e4:
ee:ba:38:a4:e8:c9:83:1f:ec:21:a8:e6:c9:47:ff:
5a:c9:14:43:68:0e:65:f5:e5:d6:38:f0:9a:ec:bb:
64:f5:3f:6f:2a:f2:67:14:78:b7:89:72:6e:45:2d:
6c:26:24:d5:2a:2e:91:0f:f7:05:4a:b3:9c:e9:ac:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:11:35:84:2D:B8:18:E8:B2:E5:AF:AB:52:86:80:EF:E2:59:F4
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c2:0d:ad:20:0b:bf:2d:e6:7d:fd:15:68:16:85:f7:f1:b3:
0a:0e:0c:76:3f:c9:dc:2b:86:b5:f2:7c:de:0f:5a:ee:ff:5a:
2a:98:d6:e0:9f:ec:c1:05:90:49:1c:b2:db:0f:73:20:9e:65:
c4:3d:12:ff:4e:15:26:ff:91:f1:a8:3d:c1:6a:36:6c:80:90:
b2:48:c9:48:a1:0c:90:eb:6a:42:77:78:1d:d4:be:43:f5:64:
96:0d:6a:02:3f:46:22:3c:df:df:39:20:4f:e5:8d:68:54:a6:
27:07:85:3e:70:e4:64:e4:2c:49:33:e8:97:d0:03:5e:46:8a:
16:30:3f:34:b0:ed:ed:7c:65:60:75:b8:82:6d:ac:61:7f:22:
b0:89:7a:3a:8e:a0:cc:5d:17:30:a2:4b:ce:77:43:22:f8:4c:
37:f2:ec:64:68:bc:35:c9:f5:c1:67:38:c7:18:57:bd:81:c4:
9e:2f:90:c5:c2:1b:93:dc:42:16:cc:d4:58:c8:2f:46:89:23:
ae:f5:47:7f:5c:e3:a9:1a:c5:fc:7f:44:04:ee:5e:5a:38:6c:
01:cb:b2:bc:8f:91:a4:11:02:4c:59:51:00:17:03:79:c0:5b:
57:a0:83:37:e7:ca:fe:2b:82:54:3c:93:d3:92:ba:50:12:3c:
05:82:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:53:30 2025 by rpki-client