Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: baas56grU54mUpxeKAcOhHYj15vMI+jm8sEE9w/2FVo=
Subject key identifier: 19:9C:37:56:D1:12:09:05:AF:45:F2:7D:52:E8:9B:64:0B:C3:D7:13
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 0197B6A1B725E8B6FB89143C20BE49EF93A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0CE5
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: dmVbqhmA2fnsT71MwJ9pnOtiSY+lM8nPeTp2CBx7IS8=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b7:25:e8:b6:fb:89:14:3c:20:be:49:ef:93:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=199c3756d1120905af45f27d52e89b640bc3d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:91:a9:b8:b0:19:d1:21:14:d8:26:c4:ed:
32:e9:4b:dc:08:11:8a:9d:8b:06:51:e0:3a:89:35:
60:7b:a3:5a:d9:45:8f:31:ba:f1:16:0b:dd:65:c2:
e5:ae:6e:0b:30:e6:81:74:b8:21:07:bc:55:bb:ad:
4e:92:1b:22:de:e8:37:3e:48:28:c1:05:b1:dc:43:
a0:01:f7:30:1e:ed:ab:c3:0e:39:27:61:73:3b:02:
f7:e6:3a:a7:69:a4:eb:7d:2d:2e:f1:26:55:c9:8e:
c2:cb:5b:b6:6c:b3:59:38:08:68:22:6d:88:7f:15:
9b:c3:ff:0d:79:07:0f:51:79:74:93:dc:f9:6a:2e:
d2:23:fc:09:c5:9b:83:6b:c4:6a:c5:46:39:d7:a5:
a9:a7:9c:e5:6f:7f:56:72:9e:aa:05:98:97:e2:1a:
7f:41:da:cf:9e:57:e3:92:15:8a:0b:1b:36:e7:d8:
14:c7:b8:0c:6c:76:86:43:70:0a:f0:6d:12:4e:b6:
17:64:84:66:11:74:a8:db:79:76:2b:38:8d:4f:d1:
d7:7d:67:be:cd:98:bc:b8:62:b5:1f:fe:c4:04:1d:
b5:0c:a4:d5:1f:44:73:c7:f1:e8:a4:a8:b3:df:26:
f7:dc:a1:3b:83:11:89:99:2e:8c:2c:5b:64:46:67:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:37:56:D1:12:09:05:AF:45:F2:7D:52:E8:9B:64:0B:C3:D7:13
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:72:10:b6:3f:e4:56:7d:06:f5:0c:ba:24:16:06:30:2b:7a:
80:e0:2c:48:ef:48:a4:37:30:70:87:4d:fa:77:f8:15:34:47:
af:24:09:4a:b2:09:35:23:75:86:bf:8f:58:37:5d:7e:e1:11:
85:e4:ef:58:ad:2e:6b:59:7e:9d:3b:e2:58:88:51:2f:15:4a:
c0:73:7b:50:e9:26:49:d3:fe:12:c0:b6:8c:3a:01:07:cf:63:
6e:59:25:79:50:cd:91:fc:25:a7:90:95:57:6e:95:af:ee:ee:
92:41:c5:44:14:e4:20:2b:b3:4a:31:37:0e:9a:54:b8:da:5c:
e7:75:b7:03:5f:81:c5:6c:34:bb:c6:b6:7e:ef:64:55:9d:95:
37:5e:bc:37:88:13:45:0c:1f:8d:a0:d9:6f:4f:8b:a6:f8:d5:
29:c6:f6:ef:24:00:b0:58:5e:8a:cb:75:46:d9:8d:7f:55:12:
5e:12:aa:a8:ff:05:b3:db:cf:58:07:d2:2a:a4:9c:32:11:f6:
58:18:70:d9:c4:14:4b:61:22:bd:48:e2:e7:bf:c7:9d:52:06:
f3:ce:4e:16:d4:b0:b1:1c:f9:04:6d:ed:72:3a:4e:d7:b1:72:
57:f0:c7:63:c9:c1:dd:62:99:7e:40:67:98:6d:15:bb:8a:15:
d9:9f:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:15 2025 by rpki-client