Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: UJnRh6YoBjg5cFnCcvVYS0BTyKO2VM8IUBOeaqfPcwU=
Subject key identifier: 5C:7E:8B:7C:CE:83:7D:F0:E9:29:1F:92:F0:F4:06:BE:FE:23:B2:FD
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 0197B745367413362229F93C8406A49D89E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: oUCUOQF2ibJrm5S7yvKrMmF8t6HrM5yoNasvOaKV/Bo=)
2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:36:74:13:36:22:29:f9:3c:84:06:a4:9d:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=5c7e8b7cce837df0e9291f92f0f406befe23b2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:9f:39:2d:85:8f:c7:71:9f:f6:5f:24:84:
4e:28:25:09:cc:4c:05:55:eb:62:b6:ea:9d:e8:62:
49:4d:6f:de:92:7b:5b:92:67:d0:68:ff:db:d0:1d:
21:a3:d8:3b:c8:88:ee:f4:8a:af:fd:c7:e3:0d:44:
94:fe:a9:df:83:77:76:2d:76:3f:46:a2:ef:78:55:
1c:72:83:6e:62:61:81:61:f7:49:dd:da:86:fb:a4:
9e:48:75:df:ef:ec:a2:c4:70:d3:32:a2:fd:9d:2e:
fb:a1:2d:eb:8c:6e:09:07:47:23:8a:d4:12:2a:2e:
ec:1c:3c:b1:55:f1:77:8a:24:4b:d1:e6:9f:20:55:
14:3c:32:bb:1d:7e:9f:a5:9c:a2:28:1d:4b:61:bd:
92:b8:c1:6f:04:d0:ac:00:12:bf:7b:62:73:d0:66:
27:9c:41:7c:59:ba:df:a6:0e:57:44:ae:b5:32:a3:
bf:06:f5:2c:22:4f:27:bd:4d:47:9d:00:37:19:c0:
b3:70:64:d9:88:35:cb:2f:71:e4:cd:9c:7b:d1:4b:
5b:64:7a:d6:f1:e1:63:db:73:8a:90:c7:c5:56:de:
a3:d4:c1:69:18:b8:3f:bc:a5:d0:87:d8:92:9f:c1:
99:b1:a1:c6:88:0a:4f:7e:39:3b:65:be:b1:04:95:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:8B:7C:CE:83:7D:F0:E9:29:1F:92:F0:F4:06:BE:FE:23:B2:FD
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:88:fd:23:04:ee:ed:f5:5a:09:d1:91:1f:9b:e1:a1:1a:1d:
3f:57:29:1e:9b:41:06:51:37:b3:44:a2:a9:3f:b0:9e:27:e1:
98:50:20:6b:da:1c:ad:cb:6d:7f:94:45:59:a8:3d:98:d9:37:
c6:5b:bc:ad:97:4b:27:59:00:5a:ed:14:a1:e4:6b:e9:bd:bc:
b7:1e:8f:09:bf:56:12:2c:50:3f:6e:16:ec:1a:6e:00:fb:14:
06:0e:f9:3e:ab:25:d2:94:94:ac:c2:ca:e0:f3:c6:54:a5:51:
41:6b:62:a8:3e:52:a8:b7:86:4f:82:70:29:61:b1:b3:bf:f3:
11:25:a6:c3:27:39:98:e0:52:01:e9:b2:84:ef:e5:2f:33:c4:
91:fc:ef:61:5f:f8:c8:77:29:30:4e:70:92:6d:32:a3:52:63:
af:30:79:04:74:a6:e2:b9:6c:16:a4:ad:9c:02:20:f9:2a:51:
8b:06:34:de:2f:e7:96:56:4d:58:c6:53:f3:55:ca:1f:52:3e:
8c:23:9c:9f:aa:60:98:b0:d8:6e:a3:56:2d:03:ff:d8:b8:02:
5e:4f:87:f6:c4:a2:47:67:7e:19:a3:68:a4:91:37:4a:28:d7:
a8:5a:19:57:77:66:43:1d:c0:af:c0:7e:58:5f:e5:71:4e:49:
52:9b:43:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:08 2025 by rpki-client