Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: jxPfWIpnjfXFdpm4Ea+p1XFdheSGqyUNbrrgbK8GrdI=
Subject key identifier: F5:D0:1D:F1:21:3F:0D:B7:64:EA:7B:7D:C1:C7:BC:05:04:EE:73:FB
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01974BC3F1FB4A692816A70ACB33E2A301DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0F39
Signing time: Sat 07 Jun 2025 19:00:21 +0000
Manifest this update: Sat 07 Jun 2025 19:00:21 +0000
Manifest next update: Sun 08 Jun 2025 19:00:21 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: Pp8GgpWTKDBAB+JmbKKA2+mAGq6yuF1RrfKgRGnT5o0=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:f1:fb:4a:69:28:16:a7:0a:cb:33:e2:a3:01:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jun 7 19:00:21 2025 GMT
Not After : Jun 8 19:00:21 2025 GMT
Subject: CN=f5d01df1213f0db764ea7b7dc1c7bc0504ee73fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:2d:a0:29:17:cd:ad:03:3f:a5:77:bf:ae:
4d:f4:d3:43:d9:4d:90:20:21:05:5a:ae:3a:d9:3d:
e5:6a:f1:f1:8d:5f:a7:a4:57:10:1b:0d:96:b0:0a:
ac:a7:24:9d:92:c4:9f:e1:50:a3:7e:00:b0:30:4b:
21:c0:93:8f:f5:fa:b0:36:a5:1c:a1:ab:f5:ff:e4:
ef:36:d0:54:56:6b:52:d3:02:dd:f6:3d:4a:73:e7:
cc:49:6b:13:58:26:26:3f:b1:89:63:83:e1:d3:73:
e7:f9:d8:af:11:e8:29:c2:ce:f5:ca:f3:2e:b1:a9:
9a:7e:c7:4a:0b:09:65:91:b7:a9:f1:83:ac:0f:0d:
03:81:53:c1:9b:0f:08:49:49:89:6b:3c:8d:e1:95:
3b:88:2d:f3:56:a2:63:d4:04:52:83:14:0c:47:ed:
49:53:4a:be:03:b5:47:80:d8:ad:68:20:37:b5:da:
e8:07:eb:9d:e9:3f:b9:7a:af:14:74:41:e1:c0:e7:
d3:43:c3:da:a3:eb:ba:1f:b7:b7:01:32:ee:e4:89:
f9:a3:c2:49:ea:ca:e5:99:44:f7:b1:7f:b3:63:7e:
25:4d:0a:bc:4b:53:43:be:07:ab:2b:14:c4:79:b5:
50:12:60:ed:be:0e:e0:6f:b2:92:7d:20:31:c2:c1:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D0:1D:F1:21:3F:0D:B7:64:EA:7B:7D:C1:C7:BC:05:04:EE:73:FB
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:ff:aa:ed:15:16:51:14:2f:65:dc:41:66:f4:ad:f2:52:
61:7f:27:0f:3b:17:93:6f:6b:6e:36:d0:b8:98:dc:db:79:5a:
47:c4:53:d3:b5:26:08:80:69:57:b7:bc:b3:d9:01:a3:60:da:
f3:10:c6:52:95:1f:b4:41:1f:71:bd:6b:7b:e8:38:da:c9:22:
54:30:1c:27:15:17:e6:0a:00:d0:fe:6d:a0:8a:3a:dd:13:8a:
26:57:59:f1:7f:6f:2b:4d:d9:dd:c1:46:dd:40:60:c0:63:bc:
29:5c:04:b4:5b:e5:9a:8a:75:3b:3f:bf:a4:65:3a:97:af:02:
6e:fc:ef:6d:74:e7:fd:e6:ea:7e:fc:08:e0:12:ce:a2:2e:25:
31:1d:fd:c0:38:ce:e6:99:51:61:58:c2:5f:5b:87:34:a1:0b:
10:53:e9:a0:88:5a:cf:b7:64:d2:33:82:3f:22:41:29:0f:4f:
43:69:90:28:29:90:f5:e7:2c:33:06:9f:f7:60:5c:5b:ec:2d:
84:0d:4c:77:ff:5b:cb:80:69:0e:e8:bc:8f:d8:3e:cb:00:fb:
cf:bd:ad:bd:fd:51:33:9b:73:ee:8d:bb:88:a7:85:b9:4a:80:
19:5d:ef:30:85:e7:6a:7d:d8:bd:d0:74:e8:86:08:aa:d4:01:
06:04:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:10 2025 by rpki-client