
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
File: 3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json)
Hash identifier: NJrjqdaTFWi63h25maypUSjGbgbdFQ4kUJwDysHmAzQ=
Subject key identifier: AB:1C:49:C2:DE:9A:FE:0D:C1:B1:5C:A2:81:41:0C:4F:B7:E0:4F:94
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial: 01974DB308B65F1D63DBD0C6A99027A2BE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
Manifest number: 7A
Signing time: Sun 08 Jun 2025 04:01:08 +0000
Manifest this update: Sun 08 Jun 2025 04:01:08 +0000
Manifest next update: Mon 09 Jun 2025 04:01:08 +0000
Files and hashes: 1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: p1ft00K1nyKC2hEVlyIgxGgfetpMb2PTbGSFK3b1FhQ=)
2: 4YPbiAtEI4aIVwSYoOB9atG5l_o.roa (hash: 5G9M3UH6Px38TdWKWNsZTcUTomaq2supA1BUuPBFOUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b3:08:b6:5f:1d:63:db:d0:c6:a9:90:27:a2:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
Validity
Not Before: Jun 8 04:01:08 2025 GMT
Not After : Jun 9 04:01:08 2025 GMT
Subject: CN=ab1c49c2de9afe0dc1b15ca281410c4fb7e04f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:40:db:df:67:e7:5e:4f:af:4b:11:ee:bf:
c4:5c:4a:9f:b5:72:77:92:aa:a6:38:d0:cb:40:7d:
87:d1:8f:a1:0c:cc:c8:79:c9:6d:d0:bf:8c:9d:90:
d7:48:7f:a1:53:ee:3f:68:d6:9c:7d:2b:15:1c:0e:
09:d8:4e:c7:01:2d:c0:03:0e:15:bb:c7:45:ba:90:
d7:dc:46:55:87:a2:b6:d2:fc:0e:39:5a:41:29:e1:
a5:ec:7f:1a:b3:08:4f:9d:46:38:fc:9c:45:ff:5a:
3b:5b:76:3c:44:a2:25:94:65:cc:3d:d2:98:17:06:
5b:78:cd:66:88:e3:bc:f6:89:a1:8b:5f:bb:34:9a:
11:05:35:bb:08:8c:6b:c3:74:f0:b8:3f:1c:36:b6:
cc:6d:e2:b4:b1:f5:6b:d3:5e:1d:05:f6:f0:c7:94:
71:71:da:b5:96:c8:c3:de:c3:28:8c:84:54:8e:0c:
39:52:bc:b1:e6:84:a9:75:b9:d0:d7:e1:62:67:70:
4a:73:91:74:af:17:87:8c:fb:9b:01:4c:8c:d1:d2:
69:a5:6d:18:9f:59:c6:50:1a:e5:d6:50:03:9e:3d:
90:54:8c:d7:9f:62:dc:e5:30:9c:d6:fd:d9:0f:87:
eb:15:e3:5d:c4:de:38:ba:38:73:f2:6d:6f:e9:9d:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1C:49:C2:DE:9A:FE:0D:C1:B1:5C:A2:81:41:0C:4F:B7:E0:4F:94
X509v3 Authority Key Identifier:
keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:03:5b:9c:54:71:3b:7d:84:4c:21:0a:3d:e4:fb:3d:81:
21:b9:18:55:fc:91:94:5b:dc:cd:8d:22:5a:c5:22:d8:6d:6f:
40:e7:5a:f5:ac:08:43:8f:09:04:f4:47:5a:59:1f:45:7e:8a:
1b:fc:80:ef:b4:e9:ae:16:1e:da:de:c9:f9:64:11:5f:01:e2:
52:6c:51:35:8b:58:a7:ee:ff:c1:02:1b:c7:86:82:de:2b:f4:
f9:29:30:25:64:7a:1c:5d:96:26:6c:52:63:92:10:10:49:bd:
0b:6c:62:ac:f9:bb:49:c9:ce:24:f1:72:a5:e1:1c:05:67:fc:
c7:29:49:7a:80:d0:1e:1b:9d:d2:6e:4d:d8:1f:11:1e:cd:a6:
d5:c9:76:20:91:fe:ee:ba:52:6b:5f:9b:71:a7:50:60:34:16:
3e:d5:3a:a4:3a:cc:44:64:ff:7b:6d:34:8d:ef:ea:16:94:8d:
16:57:64:b9:ad:bc:48:d0:8a:e4:b1:1c:73:33:ee:64:d9:db:
a8:d6:ed:3e:f1:81:64:9c:3b:bd:55:4b:e5:60:4d:47:6d:75:
0e:86:8f:47:82:02:de:4d:ce:4a:ff:92:55:b9:de:6d:3a:c5:
3d:55:cf:da:21:c8:97:c2:34:e6:73:58:58:09:c6:6f:f4:62:
d5:c9:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:44 2025 by rpki-client