Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: uynPUvBLHqvXqJUPTZuejrDg3ocvq5qrYCiq4Tg7DfM=
Subject key identifier: 71:BC:33:65:65:77:21:72:28:F2:52:E5:01:73:E8:47:66:2A:45:B3
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 0197654D107867DF322FD4FE4A1E7CD690A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1590
Signing time: Thu 12 Jun 2025 18:00:38 +0000
Manifest this update: Thu 12 Jun 2025 18:00:38 +0000
Manifest next update: Fri 13 Jun 2025 18:00:38 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: YWumP3CoEum2PTXvTSBFejyVitqn9YIpVACO0od+s7U=)
2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4d:10:78:67:df:32:2f:d4:fe:4a:1e:7c:d6:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Jun 12 18:00:38 2025 GMT
Not After : Jun 13 18:00:38 2025 GMT
Subject: CN=71bc33656577217228f252e50173e847662a45b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:4f:8d:e2:f2:60:25:d8:b2:bb:d4:b2:b6:
71:25:ab:1b:80:6e:9f:18:9b:d6:9d:6b:ae:e8:18:
37:8a:56:34:08:59:fd:66:38:e6:95:d6:b9:34:b3:
7f:dd:b3:21:df:30:4d:c6:36:63:8f:9b:a8:83:0c:
af:e9:8f:8a:c6:48:d7:17:9f:42:99:fa:02:5c:60:
4d:52:fa:a0:bb:45:ea:3c:5c:bf:8d:7c:59:ac:2b:
ce:eb:83:6a:33:2f:a5:40:70:f7:30:b8:ce:64:01:
e7:5f:16:04:d2:b5:49:b2:af:0d:89:28:4b:d2:2e:
d0:b2:53:0c:2a:07:39:e0:10:f0:85:64:46:9b:22:
22:a2:21:e9:10:9f:ec:69:e3:24:ec:89:fc:7f:e5:
e3:ec:2a:a0:87:10:35:fe:62:84:dd:d3:6d:ba:33:
ef:c4:d9:76:07:84:a7:ee:c2:9a:1c:0f:7d:e4:db:
9e:e9:61:53:1b:d6:4e:21:98:f3:6e:b9:12:12:0a:
98:f8:98:54:bf:a4:f7:2f:98:c3:b3:16:da:ae:6f:
e7:c4:be:30:ce:cf:e6:54:cd:e0:53:08:e2:fa:53:
d9:42:3f:d9:95:6f:0c:92:77:f6:a1:6d:98:60:3b:
86:33:9c:09:67:35:60:29:73:f7:4c:9d:a5:3a:5e:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:33:65:65:77:21:72:28:F2:52:E5:01:73:E8:47:66:2A:45:B3
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1b:4c:a6:a3:21:b1:07:f4:88:50:2a:3e:fe:e9:e5:7b:a1:
42:f8:d7:a7:ec:cd:ae:95:44:90:46:dd:a4:51:35:24:55:b1:
c7:12:ca:0b:15:f8:83:f8:94:7b:c0:8f:68:04:aa:6b:4c:f6:
4d:0d:d5:c5:82:e3:ed:bd:d3:a3:13:64:02:bd:aa:6a:e9:54:
cf:8d:9f:91:0a:a0:7b:27:89:1d:9f:a6:79:1a:77:63:b3:6c:
47:6c:a7:a3:de:23:81:53:1c:ff:89:9e:dd:7d:70:83:a6:1c:
48:56:9e:c7:17:41:5b:3f:ac:fb:2a:ce:d2:16:7d:ba:b4:48:
eb:b2:6c:c6:51:17:26:6c:b1:35:4a:51:03:3c:18:e9:45:8d:
b4:b6:13:0f:f6:62:53:4f:62:81:ae:05:b9:9c:9d:67:d9:b8:
d2:20:20:15:83:1a:45:55:98:1f:e0:54:92:d5:c8:e8:9a:ca:
d4:87:c1:a1:e6:af:59:3c:c4:04:5f:60:10:0c:b7:d0:40:0f:
91:57:33:26:a0:b6:be:ea:db:ac:ce:48:a3:d5:1e:b6:6b:12:
04:b4:54:74:35:90:36:c8:23:c5:b3:81:50:ae:fa:58:be:ec:
4d:42:97:2c:f4:6d:50:c4:72:e7:65:94:62:a9:92:ab:c8:5c:
e7:af:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:36:46 2025 by rpki-client