Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: DryRbwkm6FtWedfkd0RzC/BBZNYhf6ytSi8mFiG7w5g=
Subject key identifier: 67:A1:37:AD:9B:FC:AF:11:86:59:47:A3:17:17:5B:16:6D:66:B5:43
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019750B396401EE0A0B62F95CE075CA1C579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0E07
Signing time: Sun 08 Jun 2025 18:00:36 +0000
Manifest this update: Sun 08 Jun 2025 18:00:36 +0000
Manifest next update: Mon 09 Jun 2025 18:00:36 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: 0pxfv/fdJVhjZ7xUBfgrkArYnyhY+Acr8ZLpOx6Nvck=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:96:40:1e:e0:a0:b6:2f:95:ce:07:5c:a1:c5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Jun 8 18:00:36 2025 GMT
Not After : Jun 9 18:00:36 2025 GMT
Subject: CN=67a137ad9bfcaf11865947a317175b166d66b543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:09:f2:15:65:2e:78:f4:e9:91:9f:94:5b:
04:c0:1c:4e:d4:e6:3a:6b:2c:4b:f3:ee:90:21:94:
60:39:84:f0:43:ef:e3:c1:f4:aa:e5:8b:7d:70:d5:
fc:eb:8a:cd:06:07:d2:ee:62:04:22:e2:1a:95:b8:
95:3b:fc:fc:78:0f:5f:ab:80:18:e2:89:35:8b:ca:
99:e2:3c:e1:b4:16:42:04:db:6f:18:35:c8:2c:54:
6f:f0:09:f7:2e:75:a1:80:70:a7:14:44:20:27:2a:
b3:d9:6f:aa:82:e0:ee:ff:e6:45:37:f6:75:10:63:
9b:6b:59:f8:a8:16:eb:30:a0:e3:11:f1:d0:1b:c4:
c3:16:4d:63:ec:dd:23:f0:fc:cf:81:76:b3:14:d0:
a6:61:70:9f:0f:d2:99:58:6d:6d:e3:39:9a:1f:80:
d1:3c:df:ec:44:3b:2f:e9:07:74:8d:01:b9:89:aa:
1a:8a:43:cf:5a:68:67:b4:93:58:2a:67:7a:ef:68:
07:73:e0:f2:4f:d5:7c:93:34:b1:0f:cc:06:0b:d3:
b1:86:b6:1d:68:ee:69:d3:1b:2f:ee:de:04:b3:20:
a2:98:8a:ad:bd:9b:35:93:57:1b:f9:e2:f8:7f:ba:
5b:b6:22:52:67:53:fb:e7:a7:2f:c7:f4:21:ae:0a:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:37:AD:9B:FC:AF:11:86:59:47:A3:17:17:5B:16:6D:66:B5:43
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8d:4e:72:75:92:aa:3d:fe:d6:73:ea:a0:63:36:5a:f0:40:
7a:19:14:3d:a0:f3:27:0c:ac:96:ad:b7:fc:b3:86:d3:6c:9e:
80:bc:6d:ea:70:58:f0:35:e2:f3:8c:8e:13:70:77:bb:3f:cc:
b9:79:54:67:a0:0d:7e:fc:7f:d2:c0:de:c6:15:99:77:e1:0a:
58:09:af:72:4e:53:7d:e5:27:91:f8:fe:d0:8d:f5:66:9f:ac:
bd:25:44:82:4d:46:fa:1b:44:57:3e:1f:09:c9:c9:f0:f0:63:
b1:cd:d6:33:13:56:9a:28:e3:65:b6:15:ea:eb:17:c5:1c:8b:
57:8d:db:e0:3f:b2:0d:13:8e:3a:a4:7e:4f:3a:0a:67:ba:19:
5f:b4:35:30:3f:3f:6a:61:c0:b2:43:25:7d:49:d7:53:51:2a:
11:38:7f:a0:db:3f:76:0f:56:50:c2:46:31:d9:e8:e8:70:02:
c4:aa:66:4f:f1:3e:bd:5b:43:88:af:9e:53:a1:95:96:84:c9:
8d:b9:b3:31:8e:39:10:69:cc:43:8f:b3:59:9b:1c:0d:b8:a0:
94:f4:eb:fa:78:3d:9e:35:53:8c:bb:ae:5e:6a:82:86:42:25:
98:7f:5e:36:66:3a:eb:0d:a8:13:14:5a:f2:3a:d5:1b:12:31:
15:55:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:25:57 2025 by rpki-client