Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: 5CgLl/FZnFbKrte6nlIpee+3uGgu9JVmLN2EXPRRl3w=
Subject key identifier: 46:C2:B8:94:72:8C:3B:9B:A5:FB:BC:1B:95:55:9F:F5:D7:12:D2:FE
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 0197481E81B267E8FC817E393B0406FE37E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 02:00:48 +0000
Manifest this update: Sat 07 Jun 2025 02:00:48 +0000
Manifest next update: Sun 08 Jun 2025 02:00:48 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: A047z+L6YsLdk80N0zsC/T81I1uQ9j6q2QSeW1+jZ48=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:81:b2:67:e8:fc:81:7e:39:3b:04:06:fe:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jun 7 02:00:48 2025 GMT
Not After : Jun 8 02:00:48 2025 GMT
Subject: CN=46c2b894728c3b9ba5fbbc1b95559ff5d712d2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:75:51:41:a6:5f:ca:0f:41:9b:99:c9:a7:
a6:0e:36:1d:d1:c8:2e:fd:a0:2b:33:ae:69:9f:a8:
c6:35:85:20:0b:87:51:86:b2:f2:78:f4:1d:08:71:
2b:9c:82:61:25:ad:47:87:eb:79:db:fa:f3:ef:61:
3b:08:91:0f:60:c2:10:17:8a:3f:87:b0:56:ee:12:
57:c8:80:37:6d:c9:a2:2c:4f:e5:13:f2:e7:fc:b6:
fc:d4:50:89:6d:b8:b2:18:7e:2f:3e:14:cb:43:f7:
6c:02:ec:db:98:7e:64:ab:a6:2d:09:7e:f3:d7:b2:
fb:18:d7:bf:ba:fc:41:ad:a1:09:0b:b7:22:43:f0:
89:14:3d:da:bb:35:4a:e1:d4:4c:98:92:c6:b0:5f:
f3:48:93:78:11:7d:e1:9b:e1:bc:42:8b:89:ee:34:
81:77:06:ef:75:c2:6f:80:af:e0:49:f2:27:52:8f:
5c:4a:22:b7:03:a2:0b:a9:c0:fb:0c:47:91:d2:40:
a0:50:41:5d:2c:31:30:1e:99:e8:1a:a6:cd:ca:95:
ec:94:86:ae:ea:77:39:d5:07:ab:c0:58:8d:9f:1f:
fb:84:ca:a4:85:10:5f:c6:cb:0c:24:e1:49:54:9e:
fe:c7:6e:de:47:f9:54:98:0e:97:85:3a:24:07:09:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C2:B8:94:72:8C:3B:9B:A5:FB:BC:1B:95:55:9F:F5:D7:12:D2:FE
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e2:30:b6:1c:96:03:c5:2d:be:7c:c0:5e:ea:31:5d:bb:74:
44:0a:d8:02:c5:0e:eb:a9:81:66:8d:24:94:3b:e2:35:0c:4d:
7f:bb:8d:3d:26:61:9c:dc:08:b8:26:84:04:c6:1f:f6:33:d6:
66:03:65:59:bb:2e:43:24:cb:4c:5a:d5:8b:bf:a9:2c:c3:7f:
27:73:d8:c5:a7:8a:37:53:b6:f8:07:0d:17:02:5c:bf:c2:23:
05:e8:af:38:68:f3:ab:00:13:90:53:d2:92:ad:9f:25:a3:7c:
d1:28:db:eb:4c:5c:d5:f8:de:a8:9c:62:2c:a0:6a:5c:fa:81:
fa:a4:c0:4e:e6:d7:4c:a4:54:18:79:04:0d:56:5f:ba:5f:f3:
31:f4:0b:34:0a:ff:dc:1d:e4:cc:d7:16:c4:60:5b:ff:d7:68:
f4:ee:38:f1:da:1f:6e:08:29:79:08:64:01:a1:f7:91:96:2a:
b6:e4:92:5e:73:cd:b0:7e:4f:46:72:82:01:0b:34:cf:31:38:
04:96:a8:84:f5:f0:1b:e8:fb:86:7d:3c:10:c3:68:db:3d:a3:
11:e0:9e:c9:ed:d8:ea:0d:93:5a:b0:3c:60:39:60:fa:9b:c7:
e3:c6:85:c4:3f:54:3b:ec:9d:17:e8:51:93:60:4c:39:fd:63:
f9:70:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:55 2025 by rpki-client