Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: 6C8EDOzt6SznBc6YOPqsGU0NWPK5Xx3blpebNfXYd+o=
Subject key identifier: CA:2A:2C:A8:29:E0:9A:02:F7:B9:D3:17:64:5E:CC:9B:23:C1:93:BD
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0197477A0D8BD881265DA439E516CB9F5E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 23:01:10 +0000
Manifest this update: Fri 06 Jun 2025 23:01:10 +0000
Manifest next update: Sat 07 Jun 2025 23:01:10 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: ev+Io3BxE3J4wRoCZ9VRpDv6rf2ymaZdLmR15O9S69w=)
2: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
3: nB_zoF-5vRmGl3d9TG824Zcc-nw.roa (hash: m3z2itiLoAbrDtSbjfB2c49btcR+jFaVv3ZdkaLWcmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:0d:8b:d8:81:26:5d:a4:39:e5:16:cb:9f:5e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jun 6 23:01:10 2025 GMT
Not After : Jun 7 23:01:10 2025 GMT
Subject: CN=ca2a2ca829e09a02f7b9d317645ecc9b23c193bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:db:63:4f:cf:51:ad:52:4c:cb:29:86:ec:
2d:92:3e:0f:1d:95:db:3c:09:0d:15:2d:36:5e:08:
ad:ed:83:72:16:7e:b7:03:ad:d3:3a:cc:cc:08:29:
39:38:0b:52:64:d3:e2:81:8b:0a:b0:2c:95:ea:13:
cd:d9:81:03:cd:74:38:bb:bc:3a:b1:5d:48:a1:b7:
ee:d8:da:61:cc:0c:30:1e:7b:51:a7:61:a1:e1:42:
83:56:9f:cf:a3:b6:6e:a5:12:ee:15:3f:f5:d8:20:
18:f0:62:89:b3:f1:64:a9:b5:87:9e:f2:e4:44:6d:
ea:0d:34:31:66:b8:3d:76:69:75:ce:7a:94:53:67:
26:42:97:3b:14:b1:9c:a9:76:ed:ba:ae:e8:60:e8:
7d:24:db:18:15:db:09:7b:db:f4:db:77:ca:62:ed:
5b:d3:f7:b6:02:b9:87:6f:ca:79:c7:f3:09:d9:3a:
28:a0:31:a9:f3:b9:f2:82:07:7f:96:68:90:59:33:
f8:c4:7e:52:fb:1d:d2:db:9e:a4:ef:73:0f:4b:b3:
66:f4:d0:db:b0:83:62:ba:8e:c3:ab:d1:c7:ca:1a:
ef:d2:c4:02:8e:44:f7:1f:2d:7c:b9:9d:bb:94:6d:
15:70:95:6a:dd:e9:3d:52:79:ea:20:87:dc:08:55:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:2C:A8:29:E0:9A:02:F7:B9:D3:17:64:5E:CC:9B:23:C1:93:BD
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:62:ef:ca:b9:3c:a8:82:6c:b3:0f:50:72:04:35:84:1c:02:
86:30:e4:60:5a:56:1f:f5:2e:14:07:e9:02:24:a5:7a:83:f2:
7d:19:a6:1c:4b:da:5b:4d:74:95:ea:ae:75:eb:4c:fb:77:31:
fc:37:cf:f9:fd:09:6c:5a:64:cb:ab:f2:67:30:83:70:04:3c:
39:e9:f2:02:ee:cc:a1:70:4c:05:67:15:36:52:54:ef:2e:de:
0c:78:69:00:f0:c0:74:22:09:b7:73:c1:5b:93:b0:08:74:95:
db:bb:a0:ed:45:58:70:99:ec:72:b5:d7:f4:ee:8d:dc:80:35:
56:a0:36:b9:5c:92:e8:9c:58:b7:11:70:87:61:0a:9a:8b:dc:
5f:79:14:1b:e5:c2:fb:87:32:01:b8:c3:5d:89:01:da:ae:7e:
cf:b6:e2:7a:c7:37:35:c3:bc:83:60:31:59:a1:8d:66:a2:0b:
c3:26:ae:f0:dd:ba:27:50:0a:fd:df:56:98:18:25:db:3a:c6:
08:00:8d:da:34:f3:87:79:53:6f:17:39:27:7c:8d:73:29:0a:
0a:83:8a:80:b9:5a:8a:e7:51:d1:53:41:89:62:d1:f3:25:50:
7a:2e:b8:e0:62:bc:c7:fc:80:0e:16:63:93:b6:bc:2d:0c:ca:
b6:99:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:39 2025 by rpki-client