Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: NWSA3WWae2y3wh2Qp+GbqehH79R6n1VNGXl4rmyUh3g=
Subject key identifier: 95:06:96:BA:C1:72:5D:C7:E9:6F:E5:84:5D:CA:B6:93:33:72:EA:E8
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019764DF88B9023914422573B248813FE807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 035B
Signing time: Thu 12 Jun 2025 16:01:00 +0000
Manifest this update: Thu 12 Jun 2025 16:01:00 +0000
Manifest next update: Fri 13 Jun 2025 16:01:00 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: VvXdCgaMtLmhXClQlGDeoS4GTvUwCVDRLRLSBNFeQ58=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:88:b9:02:39:14:42:25:73:b2:48:81:3f:e8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jun 12 16:01:00 2025 GMT
Not After : Jun 13 16:01:00 2025 GMT
Subject: CN=950696bac1725dc7e96fe5845dcab6933372eae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:1d:7c:57:9c:9f:39:4c:93:11:4e:3b:53:
3c:4e:95:3b:1b:d3:ca:ce:b2:1e:fa:38:37:b2:51:
05:4d:f1:79:19:56:51:e1:5a:16:6a:9f:10:4f:eb:
ca:95:15:6f:84:8b:a8:a5:26:67:73:3e:9d:c4:13:
fb:10:da:b7:e6:83:22:a8:5b:c6:e5:6a:bb:dd:c9:
e8:2d:16:18:86:ee:c5:6d:48:84:23:dc:b6:4a:92:
f2:2b:9f:9d:fc:ee:91:8a:01:ec:1e:d9:65:9f:68:
bd:6a:69:77:a3:81:b2:b2:d0:9a:2e:0d:29:ab:45:
7f:1b:69:47:e9:8a:dc:e3:e0:80:ae:36:a6:21:78:
1a:3d:e3:fd:73:f4:e0:0e:6c:16:97:29:b1:de:13:
65:8c:7b:e1:bc:b6:14:7e:47:aa:d1:60:e2:ea:39:
f4:18:c3:91:1f:29:5d:55:cf:54:dd:8d:bf:df:59:
54:6c:bc:a1:8d:b9:e5:0c:e2:64:93:c4:99:12:64:
c4:ba:ad:9e:5d:d0:ef:1e:91:8c:5f:d3:33:35:7e:
5b:de:37:61:32:7e:b2:95:c1:33:0d:0e:37:ad:39:
9d:98:2a:f1:03:79:5a:11:4d:c4:47:62:aa:3b:18:
cc:18:48:1b:d9:5d:7f:25:e8:7b:3a:ea:35:8f:83:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:06:96:BA:C1:72:5D:C7:E9:6F:E5:84:5D:CA:B6:93:33:72:EA:E8
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:72:69:52:47:d9:d7:37:d8:2d:57:95:dd:dc:4f:22:40:02:
95:06:6d:63:9d:77:4a:3c:d7:23:be:7d:9b:3e:27:d4:8f:83:
c9:df:d6:43:87:07:2c:8c:91:73:69:b0:fa:45:34:ca:30:fe:
ee:1f:d3:31:96:a2:cf:a5:de:cb:6f:96:d5:ce:d1:49:f3:44:
b3:51:de:17:32:dc:88:7c:2b:ed:f7:73:dd:33:19:67:ae:6f:
2e:b7:68:39:42:ab:3e:14:a2:fa:54:f2:99:37:df:b6:d5:0a:
cc:db:4b:36:ad:6d:fd:0e:0f:80:5b:94:46:ed:77:28:08:27:
15:82:0a:fa:cf:c5:21:b3:1a:a8:14:7c:2d:0e:ca:8c:31:06:
49:4e:f1:8b:b4:9b:88:97:cc:93:f9:98:32:97:02:0e:81:e7:
8b:98:aa:6b:d2:77:e4:ff:38:10:a3:22:38:2d:eb:b8:b4:61:
7f:25:2c:14:33:67:65:38:f3:1c:6b:cf:0d:21:e5:3a:fb:61:
4b:a1:eb:c6:1c:a2:ca:68:23:9f:57:37:bf:70:3f:e6:9e:87:
37:27:78:f7:14:38:68:05:55:e5:82:fc:4b:90:fe:6a:3e:e9:
2b:27:3c:aa:33:a3:8f:c9:5d:71:d1:28:e6:34:6d:35:c2:3a:
ae:4e:39:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:35:10 2025 by rpki-client