Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: Xn+64IAAfXS7OoFwVBq18DBHej5RVVq3+XsT+CV0nww=
Subject key identifier: 8A:7D:8D:4C:97:2A:A4:FC:72:D5:F0:7E:E2:D7:AD:A4:12:8C:4B:E1
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 01974A7B956D62A6398F2AE2AF134A435E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:42 +0000
Manifest this update: Sat 07 Jun 2025 13:01:42 +0000
Manifest next update: Sun 08 Jun 2025 13:01:42 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: C7HS6IHrga3wv/0jwKgpwMtJUnqrlxVlG8v9EuxZV9Y=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:95:6d:62:a6:39:8f:2a:e2:af:13:4a:43:5e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Jun 7 13:01:42 2025 GMT
Not After : Jun 8 13:01:42 2025 GMT
Subject: CN=8a7d8d4c972aa4fc72d5f07ee2d7ada4128c4be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:58:75:fb:8a:58:49:f7:fa:8b:75:94:26:
71:7a:50:d4:21:55:44:2c:2e:84:b1:5e:0c:92:68:
6f:32:79:12:29:00:ec:94:11:fd:cc:48:19:30:af:
82:e9:e1:c0:85:e0:3d:49:dc:06:29:5e:85:f5:51:
89:3f:46:10:34:1c:d5:f0:64:37:c6:2b:13:43:d7:
4e:99:9f:e9:64:ee:1b:f2:fc:32:bc:68:08:9e:69:
6e:f8:63:be:44:a3:74:42:d6:75:86:39:c1:1a:6b:
23:47:d9:95:f0:b0:77:89:e1:8e:c2:e6:48:30:ef:
4c:df:df:0d:a7:71:61:35:8e:d4:fd:16:a0:03:81:
ba:32:54:75:03:10:cd:25:57:e5:d8:91:a9:18:e0:
89:40:7b:fa:fa:6e:36:b2:a9:e4:dd:7a:65:20:f5:
9e:17:1e:39:c4:95:9d:6a:8c:a7:c7:e9:21:d5:1c:
f5:84:7c:1b:9a:41:33:5a:84:e4:48:79:f2:8d:0f:
a4:2c:72:49:85:52:da:c1:0b:42:d2:ab:17:69:02:
41:74:49:52:38:98:3e:15:5b:4d:95:ff:48:fb:3c:
e0:bf:75:84:93:63:fd:94:9e:bc:01:93:ca:b7:33:
52:c0:a3:08:38:0b:71:64:04:54:dd:03:bb:49:0f:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:8D:4C:97:2A:A4:FC:72:D5:F0:7E:E2:D7:AD:A4:12:8C:4B:E1
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:40:21:6e:3e:71:f1:9d:d7:04:64:2a:ef:99:08:14:ac:
ee:81:e8:54:68:96:71:2e:a7:b7:7c:65:74:3e:75:ae:4a:77:
f2:3b:68:01:91:1f:3d:6e:5e:2d:58:59:51:4f:6a:95:f9:6f:
73:c4:8e:b7:d2:f5:3d:a9:fb:96:d7:41:b1:c5:f3:0e:51:cc:
0f:58:d4:60:6b:08:12:01:29:bd:1a:9d:d1:0d:cb:3c:1a:56:
5c:a1:81:85:d5:b4:0d:cc:f4:18:3c:da:9a:62:b3:5e:4e:ae:
4e:c0:2f:85:9c:3c:2d:78:3e:52:34:a3:84:88:c0:1b:28:7b:
2b:41:9f:d2:d1:51:31:75:85:ec:b2:5b:40:61:a1:6d:ec:45:
73:9c:1d:0c:a6:3c:6f:40:7e:01:30:9a:3f:4a:87:00:a1:cb:
9a:68:27:a0:ac:8e:8b:98:84:b3:ab:75:bb:2e:76:18:1d:0b:
97:0b:01:78:90:ad:6a:44:1e:39:84:57:3f:61:17:00:f1:06:
f4:be:5e:3a:08:2a:1f:39:a1:be:55:4c:fd:f1:52:85:d2:34:
76:ea:72:a8:0e:dc:25:8b:86:0f:c8:d7:8c:94:29:4f:e2:b9:
75:b9:cc:6c:00:92:95:25:5b:bf:a8:4c:89:98:e7:1d:49:8d:
4f:7e:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:24:02 2025 by rpki-client