Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: z/7rY5Sx7hPTbVYQ0VWg63vAeI1s2xrYdm62IgmN0Xg=
Subject key identifier: 4F:3C:04:4D:6F:B7:9B:00:65:BC:10:EF:A9:6C:F0:26:C4:C7:99:39
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01975647EB8CDDF36B7C3C152D46E2B2F32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0E3F
Signing time: Mon 09 Jun 2025 20:00:43 +0000
Manifest this update: Mon 09 Jun 2025 20:00:43 +0000
Manifest next update: Tue 10 Jun 2025 20:00:43 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: UR9r3dsJ0LKP0gT4lyGFHdt5gkl/zmdLZJpRwr9yjfQ=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:47:eb:8c:dd:f3:6b:7c:3c:15:2d:46:e2:b2:f3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jun 9 20:00:43 2025 GMT
Not After : Jun 10 20:00:43 2025 GMT
Subject: CN=4f3c044d6fb79b0065bc10efa96cf026c4c79939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:63:9f:5a:30:79:47:8d:03:89:53:35:76:
45:96:cf:a9:09:30:f7:38:51:9a:ea:1f:89:db:e5:
96:cf:00:ab:c4:56:35:51:2c:ba:af:03:b5:0a:d1:
33:58:0b:10:60:09:e2:3f:68:0c:5d:e0:36:0c:07:
dc:d4:97:7f:db:07:1c:f7:83:5d:a6:6e:79:d5:df:
9a:2c:bf:39:15:ab:0c:4c:4a:48:97:14:1b:73:84:
29:44:97:b1:02:27:88:69:27:ce:c1:e7:6a:d1:2e:
9f:1a:eb:24:de:0f:e2:35:c3:90:81:11:81:23:39:
2c:b7:1f:5d:84:98:6d:a6:e3:f5:58:38:b2:43:32:
9e:7c:68:9a:79:0b:26:1f:77:ae:e2:a9:2b:c6:b2:
f8:3f:3a:6b:6c:24:fd:18:1b:34:2d:b5:a9:50:19:
41:aa:ba:ec:68:ce:45:81:c8:b8:15:e3:4b:e2:4e:
4a:a0:95:14:0a:86:cb:15:64:b3:cc:21:23:ff:16:
95:6f:99:ed:24:28:b9:eb:a2:10:eb:d9:f0:92:92:
63:1f:98:16:7b:f6:91:ca:c7:5f:44:42:68:12:c2:
d6:ee:df:54:b4:69:98:07:88:f1:71:b9:7e:23:c2:
3e:b6:ab:cf:f8:c3:30:4d:73:59:44:be:c8:0a:d9:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3C:04:4D:6F:B7:9B:00:65:BC:10:EF:A9:6C:F0:26:C4:C7:99:39
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:de:12:75:fc:d2:8d:17:66:17:c9:d2:a8:50:3f:d2:59:46:
71:83:ba:96:32:18:f0:bc:f4:ea:15:32:d9:64:46:a9:8e:99:
28:3c:cd:1c:f1:3a:c7:56:dc:cf:8b:1d:e4:33:e9:de:64:0e:
80:30:ae:88:23:22:83:b9:3e:1f:ef:29:19:79:cf:76:69:5a:
2c:96:9d:a9:68:e9:8c:d2:c7:49:13:dd:36:5b:fa:13:32:e3:
d8:29:27:97:05:da:25:d0:5a:d2:34:38:0e:86:a5:8f:16:32:
24:11:fb:4e:52:68:68:f1:e6:b2:25:7c:f7:d4:6c:26:03:6f:
66:3e:57:03:f6:7f:e2:8b:12:bd:6f:e3:e0:46:a7:7a:5e:3b:
37:5e:d6:a1:f8:c2:5d:d5:bb:76:8a:fd:14:1f:46:d5:90:97:
17:b9:a9:2f:7c:7b:50:f7:37:d4:42:2f:b7:32:53:2a:1e:72:
0a:72:e1:14:7a:3e:be:5b:b4:64:19:0e:c7:82:26:6e:cd:cf:
e2:10:f2:b2:73:0b:de:9d:93:f0:06:36:6d:7f:a2:cd:ea:76:
58:f8:3f:45:6d:7c:8e:e4:4c:44:f9:f6:33:2b:10:a9:cf:4b:
c9:f1:15:ac:f6:e8:34:dc:d3:6e:52:e6:75:77:b7:44:8e:9c:
cd:36:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:51:51 2025 by rpki-client