Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: IdsZf3DDhNqTC6K2aB+wytnqiQtrtRLEjlOnWCcXsm0=
Subject key identifier: AB:FB:3E:17:34:B7:B7:C5:A3:2D:E8:B5:DC:39:B7:6B:DB:CC:1A:37
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0197605DE6391E5C131210F86BA10979B4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1151
Signing time: Wed 11 Jun 2025 19:00:55 +0000
Manifest this update: Wed 11 Jun 2025 19:00:55 +0000
Manifest next update: Thu 12 Jun 2025 19:00:55 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: v/DSlLYfXFhD27Z2d3gjd5eNaw59TAPXI3+PyA5axsE=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:e6:39:1e:5c:13:12:10:f8:6b:a1:09:79:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 11 19:00:55 2025 GMT
Not After : Jun 12 19:00:55 2025 GMT
Subject: CN=abfb3e1734b7b7c5a32de8b5dc39b76bdbcc1a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:fe:f3:e2:fd:41:4d:14:48:54:e8:c6:d6:
49:cf:11:63:2c:64:0f:97:37:5b:0a:00:db:ed:16:
3b:e2:56:bb:6c:d8:db:02:96:0b:76:d2:1f:d8:31:
fc:30:b2:c1:32:d3:fd:e3:81:b8:f7:ec:ff:47:76:
e9:ea:80:4a:c5:c4:cf:f2:5c:25:f7:28:7e:0f:79:
c7:94:15:b9:fb:56:07:0d:a0:95:00:28:4f:ab:78:
e5:c9:70:ed:40:20:0b:b9:48:6f:54:09:4b:4f:4f:
f2:5c:38:0b:62:d1:e7:a5:9b:c3:bf:eb:13:2b:79:
ed:8f:bd:8a:52:33:c4:fb:b2:42:8a:e1:a7:c2:b6:
96:9f:3c:c3:d1:c1:c0:3b:4b:78:f6:ea:2f:c3:46:
9e:69:60:05:55:ee:85:0f:00:5d:17:0b:3f:6c:08:
0a:62:c0:30:e6:9f:44:73:e8:d6:4e:3d:ca:bc:c2:
28:c2:15:85:d4:13:d2:df:c1:2b:cf:a7:af:06:e4:
22:76:62:e2:8e:e5:2e:10:bf:45:e7:9e:1d:8e:8f:
25:67:e6:36:e1:b3:14:c0:2e:66:e9:fa:c3:0b:73:
54:8d:cf:9e:54:74:ab:4d:f4:13:9f:11:e8:74:b9:
c1:00:3b:79:76:68:b9:42:d4:5e:6d:6c:f9:8d:60:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:3E:17:34:B7:B7:C5:A3:2D:E8:B5:DC:39:B7:6B:DB:CC:1A:37
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:60:ce:a7:0a:d4:84:a9:b4:69:9c:ed:41:d2:f1:1b:55:33:
ab:4c:87:12:4d:3a:b0:e9:9a:cb:5c:f1:66:2c:64:ad:e6:9a:
77:3e:3c:f2:fe:69:5d:cd:ba:eb:22:8f:24:2e:95:f2:2c:eb:
ab:c7:73:51:64:7a:5f:f9:1d:bc:d7:b1:32:b9:c8:12:ee:60:
4d:2e:ea:46:c1:50:ed:35:0a:d8:02:4a:3c:8b:2e:9c:e2:ba:
5a:28:b8:53:cd:d0:5b:e2:ae:c1:25:ae:65:9c:df:0f:0f:a6:
08:62:95:6d:68:e6:f5:fd:4a:23:80:b8:a5:5b:f1:1c:e5:08:
03:13:c1:1f:28:22:d3:5b:27:e4:01:e8:a1:e3:a8:ba:c7:3c:
6c:db:4a:d7:36:9d:90:ed:eb:58:ea:79:fd:47:5f:12:4d:cf:
76:e5:62:3c:27:97:63:1f:c8:eb:e9:37:52:9e:89:d1:89:e8:
b0:75:90:c3:ea:5a:8a:53:2a:7a:eb:fe:62:49:3e:06:f1:7b:
94:65:32:11:ef:92:df:3b:95:ef:5c:62:1e:77:39:0b:fc:5a:
93:54:b3:0f:2f:ab:74:ea:91:cd:f1:da:a0:c6:52:fa:47:32:
b4:87:42:70:3b:e9:01:2c:ed:d8:f0:f3:8c:7a:a1:80:33:28:
5a:1a:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:15:50 2025 by rpki-client