Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: /IlfPn7j7KhaH/j7eek8wZvYVg/WJNEh4GNLnn8uTyo=
Subject key identifier: 1B:CF:F4:16:6A:56:1B:DD:1E:81:C4:60:92:C1:CB:E2:D5:D7:66:16
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 01974DE977C0A939ECF01909DB7AB874F758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 05:00:35 +0000
Manifest this update: Sun 08 Jun 2025 05:00:35 +0000
Manifest next update: Mon 09 Jun 2025 05:00:35 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: 5DpzZyG+8CEO15k8Bdme9PCZdRy1V6Kw/IiFWlqA6sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:77:c0:a9:39:ec:f0:19:09:db:7a:b8:74:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Jun 8 05:00:35 2025 GMT
Not After : Jun 9 05:00:35 2025 GMT
Subject: CN=1bcff4166a561bdd1e81c46092c1cbe2d5d76616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:d9:1b:50:b5:f2:c8:1a:56:1a:bb:ec:3c:
5d:7a:68:ab:54:1f:58:02:71:74:84:11:ad:66:d9:
e7:57:19:bf:b2:93:56:b2:37:33:75:d9:06:6b:42:
22:73:25:3a:05:2b:4d:d6:e5:6c:1f:01:27:05:cd:
07:a9:99:5f:31:0d:1e:ec:75:62:2c:b4:a0:6f:25:
da:8e:a7:f4:fc:06:02:19:e1:a9:20:ab:49:4b:bf:
92:e3:9c:c4:fc:0a:b7:f2:e2:a4:0c:2c:f3:57:b1:
0f:b5:0f:5f:c6:8f:47:1d:51:79:10:f7:aa:eb:a1:
3f:47:3d:44:1d:02:3a:38:cd:2c:59:4a:4c:b2:0d:
d6:76:2f:09:7a:23:4e:b5:6c:cb:ad:a4:7f:39:f7:
53:16:3f:be:8b:60:2a:2a:57:6c:f4:0e:46:0e:5b:
4c:ee:fe:59:90:1a:38:3d:3b:62:cc:6e:99:69:32:
43:12:56:a7:9d:79:25:7d:0e:07:e9:f0:2f:cd:8b:
f6:98:93:57:75:0e:fd:c9:09:27:ed:e9:d1:e7:25:
d8:22:2c:48:a2:d5:94:80:6f:3c:d7:cf:e7:56:bd:
a1:ac:5a:f1:6e:92:8e:f4:54:40:55:8b:46:f2:81:
de:c6:5e:94:85:e5:66:43:cb:f9:4c:73:07:05:cd:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:F4:16:6A:56:1B:DD:1E:81:C4:60:92:C1:CB:E2:D5:D7:66:16
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:30:2a:44:f6:cf:1b:d4:0c:e2:fb:41:23:ac:f2:d7:f3:fe:
f3:f9:9d:d2:96:f0:ac:ab:6d:17:c4:44:65:42:9f:a0:40:86:
ba:ff:07:0a:25:25:bb:35:5c:52:33:6b:94:ca:24:50:34:d2:
46:cb:b5:ab:3a:56:c5:8f:46:c0:a5:28:05:b6:df:e3:2b:86:
33:2f:6c:3a:d3:a8:58:3f:49:50:d6:a1:c1:99:9a:cc:fe:50:
29:a6:f9:61:01:bf:8e:7a:2b:77:cc:94:58:aa:a0:8c:66:06:
f0:7a:72:75:ce:33:43:d6:ee:f9:a9:76:38:99:b1:fc:ca:6f:
4c:bb:46:81:75:8a:1d:a2:24:9b:65:0d:51:2e:b9:8c:19:a2:
3b:fd:17:59:23:e7:2d:0c:22:f3:ef:65:bb:4f:97:63:da:cf:
46:da:72:ed:20:43:56:ce:8d:0a:62:6e:3e:64:2e:92:4e:b2:
c2:23:37:9f:71:ca:1e:c5:3a:94:2b:39:49:1e:7a:b9:77:8f:
36:b7:ae:60:cd:e7:41:7a:3d:03:20:77:74:d7:0d:a4:5e:33:
65:9e:ce:60:c5:b4:f3:9c:f6:4f:ef:65:d9:96:e1:d9:d2:4a:
2c:da:69:26:1c:78:1b:0e:d2:7e:eb:b1:50:52:f9:d6:76:c4:
d3:09:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:48:11 2025 by rpki-client