Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: ELwVmLlOMRTDCLHZNOG8I8zPFsYbjWuim5Cd0zsoNS8=
Subject key identifier: CF:3A:46:63:27:91:0B:8A:B8:4C:5E:1A:F3:7F:AB:02:6C:13:D3:FD
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01976997C46D42DBB7FE1C7F3BD26126E2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0E49
Signing time: Fri 13 Jun 2025 14:00:43 +0000
Manifest this update: Fri 13 Jun 2025 14:00:43 +0000
Manifest next update: Sat 14 Jun 2025 14:00:43 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: E9T1aRvqiwfz27zfJ3ufD3nuq7j6tEQT5sRI/vbQk2Y=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:c4:6d:42:db:b7:fe:1c:7f:3b:d2:61:26:e2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jun 13 14:00:43 2025 GMT
Not After : Jun 14 14:00:43 2025 GMT
Subject: CN=cf3a466327910b8ab84c5e1af37fab026c13d3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:59:90:73:de:a9:21:ae:36:c8:92:29:b7:
ed:93:bf:fc:fb:57:c0:bf:52:45:35:5c:01:cb:7e:
55:d0:da:d7:cf:7a:1c:35:ce:77:dc:66:03:d5:35:
fe:57:6c:93:08:0e:15:ee:90:15:86:bd:b3:2c:13:
c3:32:bc:09:d8:44:63:21:2e:1f:33:08:9e:45:3c:
ae:d7:54:cd:00:3f:20:d8:68:39:59:e8:3e:e9:12:
85:8e:9b:05:8a:c3:37:e9:40:cd:0b:d8:7a:8f:97:
34:90:ee:58:e2:1a:aa:e4:2a:62:10:3b:21:08:eb:
c2:83:74:b8:e3:07:d6:82:ec:cf:50:0a:a9:56:40:
6d:90:ac:a8:4d:5f:f4:c9:48:51:ac:cf:9c:98:8d:
e5:74:8a:d2:46:3f:c7:1d:88:11:a9:08:34:19:f3:
9d:32:79:bd:0f:36:0c:30:15:29:ec:2e:43:76:eb:
30:4f:80:b4:96:4a:a3:1c:b9:2d:5c:a0:cf:99:78:
8f:18:35:dd:01:3f:7b:32:59:f3:78:c9:01:04:f1:
29:61:8b:f3:d0:f3:63:bb:74:22:f7:a5:cc:c7:59:
fe:d8:17:4a:d9:94:50:a0:75:77:02:fc:db:0e:2d:
04:bb:aa:cb:23:67:31:c2:bd:e5:3c:28:56:c2:e6:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:46:63:27:91:0B:8A:B8:4C:5E:1A:F3:7F:AB:02:6C:13:D3:FD
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:77:6d:64:83:5d:bf:49:2c:d3:18:36:7e:a9:fd:ab:94:a1:
27:83:9a:3a:90:7b:5b:c4:39:a2:10:97:2e:87:12:eb:ae:20:
1b:da:8a:20:57:76:35:15:56:1a:7e:eb:c9:ea:35:ba:b8:b4:
62:05:ee:0f:46:96:b0:ed:7e:5f:05:00:97:cf:5d:e0:a0:08:
4d:81:a6:2d:bb:ec:b5:5e:ff:c3:fa:89:dc:dc:7c:77:ff:02:
fc:d2:5d:89:4c:23:7c:6a:78:a1:e3:72:2f:4b:a1:f2:e2:b3:
49:c1:fb:3f:cf:36:5c:be:3a:73:fd:0b:d9:53:f9:94:70:68:
44:d5:f0:98:b4:a9:42:7c:5b:b3:3a:8e:ad:6a:49:61:86:c8:
58:1c:f8:f5:9f:1c:4b:92:0d:d5:31:b4:c4:c9:27:79:b9:dd:
2e:c2:bf:f5:79:5e:f6:7d:26:86:a5:78:7e:00:28:43:85:3b:
d4:eb:40:fd:c1:57:54:79:03:16:ac:97:b7:2e:17:a9:2e:e8:
9a:a6:5f:dc:00:13:79:bf:5b:c9:11:3b:d8:1c:43:6a:0f:9d:
7c:0a:3e:19:cd:42:24:15:15:4c:b0:e2:91:f5:85:5e:07:36:
b4:fb:ca:5f:f9:bf:c6:7c:dc:20:35:55:c7:67:37:10:0a:79:
4d:07:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:30:58 2025 by rpki-client