Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: uK5FK/EooVU71IIhaybArQyl8EtJvgtpUYbVa151VWw=
Subject key identifier: 7A:61:82:AE:45:98:0B:D6:25:32:97:1C:97:B1:05:3C:14:12:9A:AC
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0197B890368DCDD2761C9C9B519C9C67A37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0CEC
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: w3I+B2dvYj7kD7EPtj4S3vSW94TTwl8Sa21zs9XNOx4=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:36:8d:cd:d2:76:1c:9c:9b:51:9c:9c:67:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=7a6182ae45980bd62532971c97b1053c14129aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:67:d8:88:34:0a:5f:80:38:e0:15:fb:d3:
8a:c0:28:14:27:7b:a6:5c:3a:95:97:d2:39:9d:10:
37:4c:cb:fa:75:50:ab:92:ba:84:6d:03:89:f5:cf:
31:a5:33:95:53:2b:a2:c8:aa:a9:b8:12:c1:cc:5b:
2b:36:61:6e:5e:86:43:f9:22:65:95:3c:e6:42:50:
d5:4e:d4:3d:5d:f2:e0:8e:c6:9c:ef:3a:23:9d:92:
55:3e:58:26:e4:39:1b:60:c9:43:eb:78:20:e8:3c:
3b:b0:19:32:89:9c:ea:6c:98:37:dd:cb:51:99:38:
6c:16:60:6c:1c:01:8f:74:ba:7a:68:f0:47:bf:a4:
df:2e:cc:62:01:88:04:e7:f8:2a:e0:33:c5:5f:9b:
02:1f:f3:7d:71:a5:ee:0f:36:9f:dc:a0:d3:9a:a9:
c7:e3:c8:18:eb:71:fd:66:b1:8e:78:08:51:b5:8e:
db:ba:42:3c:a8:7e:43:8f:bd:26:69:52:e0:f4:54:
f7:9c:92:c0:c1:b2:da:26:db:60:e1:d6:eb:3b:39:
67:13:d9:0c:67:5d:b5:a7:00:e0:17:d5:87:99:f9:
fb:93:d2:18:81:d1:90:27:65:45:1b:fd:af:50:29:
29:2f:a6:63:95:75:04:5d:b0:a7:04:54:64:21:19:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:82:AE:45:98:0B:D6:25:32:97:1C:97:B1:05:3C:14:12:9A:AC
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:f7:10:21:2e:df:74:d4:25:80:35:aa:c4:39:1d:8e:cb:
37:b3:f8:fc:83:75:69:a3:79:79:8b:bf:ba:a6:5e:0c:b8:6f:
a6:08:a3:a3:e6:3c:26:71:bc:99:bd:47:b3:60:d9:6b:d2:6f:
8a:69:aa:5d:b6:11:11:bf:0d:ab:7a:a0:26:c9:8f:d4:a7:44:
25:f4:a0:ab:53:c0:7d:7e:c2:9a:10:6c:8e:ee:b6:42:e4:af:
36:1b:ff:e8:99:0e:1d:7a:09:66:bd:18:41:b9:d7:56:e9:a8:
7f:62:45:7c:b3:84:5a:61:65:2d:ed:15:48:84:f3:c3:2f:bf:
42:33:87:40:cd:f0:06:89:88:7a:be:ad:e2:b5:db:ca:b0:8c:
ac:5f:bf:4f:af:78:89:02:e4:90:05:e0:f2:50:35:e9:76:c4:
3d:f5:34:21:45:8a:ff:c0:53:73:e5:15:37:86:07:ba:21:05:
3d:30:1f:f4:c5:c6:6c:9d:45:0f:54:9a:2d:b4:8e:7e:7a:2a:
d0:9f:5d:bb:73:19:e1:0b:a2:d3:62:37:a9:01:63:5e:03:ce:
96:f8:ce:1a:1a:3c:8a:dc:28:f8:6e:8a:b8:cf:d0:a5:2a:a4:
f6:65:7b:b2:93:2b:c7:14:bd:45:94:5f:13:e9:b0:34:1e:47:
75:a7:13:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:51 2025 by rpki-client