Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: a6R7fgwdd0Ipwy032AUQsolB11TyRVsv9K/pEmIDAx8=
Subject key identifier: C1:56:3D:C6:B9:C4:54:89:70:FB:D5:A2:76:C6:14:B9:E8:95:F2:7F
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01975A24B9070821A946DBB78A8CAEFADA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0E41
Signing time: Tue 10 Jun 2025 14:00:45 +0000
Manifest this update: Tue 10 Jun 2025 14:00:45 +0000
Manifest next update: Wed 11 Jun 2025 14:00:45 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: FT38hLL18PeouLQMGP78SgDwU/JuJad6/jTkwEwbu54=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:b9:07:08:21:a9:46:db:b7:8a:8c:ae:fa:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jun 10 14:00:45 2025 GMT
Not After : Jun 11 14:00:45 2025 GMT
Subject: CN=c1563dc6b9c4548970fbd5a276c614b9e895f27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:e4:2c:3c:c1:54:3d:60:ca:93:77:34:74:
f0:7c:cf:ea:6f:6e:2e:fd:22:1b:e7:a4:14:af:34:
30:14:7c:8a:a9:81:25:27:8c:5b:6d:fe:0d:3c:af:
88:62:5a:8e:d5:89:80:3b:a9:d8:c8:88:f1:f8:78:
d6:e9:9f:96:bf:52:6b:ba:ee:50:c2:c4:d2:e7:9b:
68:50:ad:c2:86:25:2f:28:39:a8:49:38:39:d5:f6:
87:66:5d:d7:83:51:4a:e7:48:3c:0f:20:43:b8:8c:
08:82:cd:38:e9:7b:48:46:7e:e6:88:09:3e:4e:36:
8e:88:d1:ae:b0:8d:9a:d8:3d:95:40:48:13:3f:bb:
dd:56:d1:f3:2e:70:f1:be:e9:8f:92:b3:e7:60:aa:
c2:45:ca:ce:74:43:6f:3e:35:4f:7b:ee:b2:ad:40:
92:21:bc:00:ae:ba:2c:fa:ad:8e:55:a3:58:f2:21:
e0:62:88:52:d9:c0:45:69:f7:22:30:a7:ab:68:da:
f9:68:c3:21:92:1f:60:74:6f:75:92:47:72:8f:9e:
0e:e2:f4:18:e8:eb:fc:84:2c:c5:90:25:79:d3:0f:
70:ce:78:e1:43:3d:77:2e:ea:58:6e:9d:9b:5c:fc:
f0:6b:07:b0:c7:25:d0:54:b4:9b:ca:a5:be:85:cf:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:3D:C6:B9:C4:54:89:70:FB:D5:A2:76:C6:14:B9:E8:95:F2:7F
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:84:07:e7:4d:1f:30:66:70:33:a2:0c:2a:9a:aa:ce:15:e9:
f1:02:36:90:2f:eb:4e:76:9b:aa:ff:f4:db:85:b8:09:8d:9f:
6e:f1:06:bf:f1:05:1d:e6:82:82:30:f1:57:e4:9b:21:78:84:
72:62:57:cc:71:20:d7:40:31:fc:29:e4:47:83:1a:7a:83:54:
29:f8:27:63:8e:2d:99:23:84:72:bf:74:18:95:d3:e6:1d:a8:
ae:2d:3a:f6:a7:a2:05:a0:78:45:d9:46:13:c5:eb:64:6c:aa:
88:fc:f2:65:c9:4a:5e:21:b4:0e:27:e7:4f:76:47:54:dc:5f:
1a:4d:29:1d:37:5f:2a:c7:d8:13:00:12:b9:0b:a4:fe:15:58:
52:30:19:4c:19:38:30:c1:37:3a:ba:73:63:b9:ef:c4:08:de:
55:cb:e9:d0:ff:64:14:35:f4:37:e0:83:a0:23:2d:d2:f6:6b:
5c:cc:9e:3a:2e:f4:ca:41:78:96:3d:03:09:6e:09:11:cf:8e:
49:cf:63:d6:42:44:53:6e:90:5d:07:0b:a5:90:60:5c:e0:22:
1b:b0:9c:ec:8d:2d:6c:20:2f:f4:72:57:2c:32:ca:c1:63:02:
06:73:2e:63:9f:37:f1:85:2e:ea:6b:2b:56:19:86:f7:f0:67:
17:dc:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:23:42 2025 by rpki-client