Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: LZFjvkTfyzmosR2zlgGQzCANol0zgJXmlLTsgITfTzE=
Subject key identifier: 4F:6A:14:81:D1:8D:DC:F4:85:2F:AF:0C:4E:4F:2F:FD:09:D1:F3:D2
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 0197B6D7395970D759775F3F4A02B6643390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 0364
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: Vephb5Pt3B3EXLg7EOPVAzOC8yA.roa (hash: wPf553d/HK8+hJAOoCPQVSLwr68fouqN6FsXjPzFiWo=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: VS8GUmhX+oqDhblw2M8h0oXhKP6NrmeXhIgWKgONxgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:39:59:70:d7:59:77:5f:3f:4a:02:b6:64:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=4f6a1481d18ddcf4852faf0c4e4f2ffd09d1f3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:ff:fd:11:71:2a:4d:b5:00:38:9a:fd:fc:
fb:31:7d:5b:92:11:4c:0c:2d:bc:96:06:5f:b2:46:
7f:f1:c1:53:6e:96:da:0d:1f:44:4e:a3:72:83:09:
14:c0:05:d4:25:93:ce:d7:c2:92:0c:c4:f9:76:36:
71:f9:e9:af:44:4d:a2:8c:be:f8:82:a9:a6:86:6d:
d0:40:29:12:5c:a4:ad:b9:ca:4f:c0:4d:65:b5:ff:
81:02:f2:2b:ed:64:06:5d:1d:d7:0b:43:90:35:e4:
60:4a:2e:c8:b6:9d:79:ec:87:36:06:3f:87:3e:4b:
e1:9a:09:e6:b3:07:a2:ed:7a:ef:9c:71:7f:70:26:
6b:b1:56:71:10:77:2e:14:1b:d9:03:d1:45:e2:df:
dc:97:48:87:f9:12:0f:08:73:8b:f3:f2:f7:75:18:
b2:6b:ec:be:ea:b8:b1:45:62:1e:bc:4f:26:b2:b1:
1e:34:29:35:bc:dc:85:f1:43:d8:e0:59:4f:aa:46:
9b:e9:09:87:3c:b3:f0:a8:45:65:c1:48:59:53:69:
05:e5:02:2f:96:53:97:31:60:47:18:b1:e2:f2:24:
fa:84:18:56:96:42:aa:08:ad:a5:47:26:98:d5:bb:
dc:69:14:9b:5c:b2:ac:9c:43:6f:fe:6d:c3:6f:e9:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:14:81:D1:8D:DC:F4:85:2F:AF:0C:4E:4F:2F:FD:09:D1:F3:D2
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:19:01:39:d2:9e:62:e4:59:e1:10:49:f3:c9:06:9d:b0:
af:2a:00:6c:18:c3:44:f2:4b:d7:1a:fa:74:b6:b8:28:83:26:
23:7d:00:7a:02:61:1b:b1:10:ec:ba:93:38:09:6a:4b:bb:16:
2b:7d:e7:70:08:92:20:49:1c:e1:1a:08:dd:39:ec:57:1f:e4:
91:93:e0:97:24:7f:e4:72:ed:88:96:78:f3:b2:16:b6:97:45:
82:06:1c:db:fc:a3:bf:c9:65:64:e9:9c:63:3b:fa:f5:f1:0b:
ea:46:a2:23:69:b1:68:d8:09:62:e8:d2:42:d3:87:d7:86:6e:
34:8a:8a:fe:64:d3:2f:4a:71:71:85:69:45:d9:7e:64:ef:84:
f4:f1:27:b0:02:4e:4f:c1:05:c7:b8:72:9c:20:3a:97:e0:88:
a1:10:53:ab:59:cd:e6:66:66:82:b6:f8:89:8c:65:50:98:82:
3f:1b:9d:f8:8a:c7:31:75:a6:6c:ea:7f:47:e3:b2:46:78:8d:
57:1a:b1:35:e1:c4:e1:2d:44:66:03:f7:df:3a:11:e5:e7:9c:
c1:aa:2a:ce:83:2b:c0:d2:8d:74:68:16:08:56:a5:3c:95:f4:
31:54:1f:46:ae:6d:25:35:c1:6a:5b:8a:89:0e:26:ab:f3:cc:
c9:44:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:09 2025 by rpki-client