Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: UJgPLTkVZDVemMRMsgApWgX9QhVED7TATYzxBw0ovFU=
Subject key identifier: 55:FC:2E:55:DF:5C:AC:74:DC:14:54:26:0C:F4:FA:A2:D0:31:37:BD
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019748C345412AFC5F95E41AE188EBAB951B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 14BD
Signing time: Sat 07 Jun 2025 05:00:46 +0000
Manifest this update: Sat 07 Jun 2025 05:00:46 +0000
Manifest next update: Sun 08 Jun 2025 05:00:46 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: Z8f5mB5/LdvBnw2BaUch8odcVxdZQrFNvdHPfwCmGHk=)
2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:45:41:2a:fc:5f:95:e4:1a:e1:88:eb:ab:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jun 7 05:00:46 2025 GMT
Not After : Jun 8 05:00:46 2025 GMT
Subject: CN=55fc2e55df5cac74dc1454260cf4faa2d03137bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:c7:db:b8:d4:f4:26:e2:10:17:f5:89:bf:
c1:ff:41:ec:f3:cd:b7:37:62:4f:c0:55:d4:74:e5:
d4:25:38:d7:4e:1b:d6:c8:c9:99:70:bc:ff:ed:10:
6d:9d:2d:fa:58:81:69:ce:a0:d2:43:c9:b3:26:bf:
ba:44:fa:15:99:ca:4a:1c:df:4f:b8:e2:f9:e1:55:
1b:ab:21:9b:6e:ed:ee:22:2e:8a:3d:5a:a8:1d:17:
f4:52:b6:94:b7:f2:ac:af:ee:87:77:e8:25:ca:fe:
58:29:8b:c1:a7:21:de:bc:5e:3f:81:86:48:38:58:
5a:00:71:8c:51:99:59:4d:27:4a:f8:dc:17:3a:0a:
86:22:55:07:18:4a:4c:a1:49:dc:53:9c:e5:6f:17:
88:ec:15:9d:47:a5:f4:c9:f1:b7:af:73:98:17:c1:
8c:91:b4:db:b5:1b:4a:ff:b4:43:91:a9:a4:b0:79:
1a:66:c5:c4:0b:4b:00:eb:dd:f6:54:4a:78:68:c3:
a5:d0:fa:97:c5:87:98:80:91:e9:f6:8e:0c:89:ef:
a8:c9:55:1a:28:ff:f2:73:e0:2f:a1:a8:7b:d2:1d:
12:64:23:33:46:e0:99:47:38:ed:ac:69:08:77:1b:
22:54:71:cb:49:e8:50:0f:0d:1d:c5:f9:80:87:7d:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:2E:55:DF:5C:AC:74:DC:14:54:26:0C:F4:FA:A2:D0:31:37:BD
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ad:b9:8d:e0:67:1f:4e:1e:7e:9a:af:ff:4a:cf:40:ba:c5:
57:f4:6b:be:23:bd:21:13:c2:70:e0:de:48:06:f4:b9:47:0f:
38:b4:b5:9e:87:f4:af:4c:15:4f:08:1d:b4:1d:44:03:98:f2:
c6:73:48:a3:e1:2c:25:58:80:92:51:b0:25:54:56:a2:aa:dd:
53:e8:bb:6e:b7:95:35:17:10:52:74:3d:b7:85:0b:a1:f9:54:
4e:51:b0:83:63:cc:2b:44:86:65:6b:0f:d4:2e:8a:b7:3f:1f:
2b:bc:03:4a:63:c9:05:81:30:d6:c0:d1:30:d0:54:6d:14:09:
7f:66:6d:37:f3:d9:16:e1:64:89:48:1b:4a:14:d1:7f:c7:12:
a0:c8:6f:b7:e6:30:68:4b:af:f3:a5:62:de:af:74:6b:3d:de:
5b:5c:b2:4d:d4:89:a3:27:d7:67:1c:09:38:60:a5:4c:01:c5:
dd:1f:4e:1b:80:d7:85:31:19:6c:e3:bf:15:2a:13:bb:14:1b:
f8:79:b3:2d:d5:4a:36:25:e3:8a:ba:64:9b:8e:bf:80:65:f0:
73:e0:63:80:cc:90:cb:3e:d3:31:1c:7f:e0:2a:42:39:aa:29:
c9:bf:55:91:fd:3d:1d:69:05:d9:54:e2:78:73:fa:93:f9:24:
ae:02:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:25 2025 by rpki-client