Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: Bt8Wr/+yswkOR2+xyLbJ0XiYMliJLzRgtfxJg0dhceo=
Subject key identifier: 54:00:05:B8:53:3C:7A:51:A2:B5:8C:04:9F:D3:62:B1:18:F7:24:60
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 019752A1DDD4C0A34238E0DDD2EFE3BDF925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 0EBF
Signing time: Mon 09 Jun 2025 03:00:29 +0000
Manifest this update: Mon 09 Jun 2025 03:00:29 +0000
Manifest next update: Tue 10 Jun 2025 03:00:29 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: R9tARWKmaM45F9dogq4nlIhi8T59EsdsoZFFh+yY3fE=)
2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a1:dd:d4:c0:a3:42:38:e0:dd:d2:ef:e3:bd:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Jun 9 03:00:29 2025 GMT
Not After : Jun 10 03:00:29 2025 GMT
Subject: CN=540005b8533c7a51a2b58c049fd362b118f72460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:f2:7d:9d:1b:e9:c3:e0:b7:fd:fa:a7:20:
80:98:54:9e:0b:13:f4:b0:26:ff:75:f8:cd:4e:5e:
3f:24:3e:1d:67:25:0e:99:ac:3b:ae:22:7b:e8:88:
c4:ac:ba:13:23:f7:0c:6b:9f:bc:30:7b:d5:e7:9a:
cb:b6:b1:fd:03:21:e6:42:58:75:6d:50:57:dd:1d:
d1:74:16:18:ea:52:c4:62:5c:65:f6:f6:e9:a9:7c:
2f:44:22:83:12:e9:e7:3e:d9:a7:76:d7:fd:ba:f4:
5b:cd:fb:e4:5c:01:4d:ad:08:3f:02:7c:3b:28:f8:
5f:00:6b:35:bb:e9:79:a3:26:e0:f6:f1:21:0c:50:
ea:60:78:92:da:d2:55:b3:17:ad:62:34:38:41:e6:
e9:26:1d:c4:26:6e:72:36:71:37:39:41:27:0c:6b:
a3:b9:a7:95:38:ad:fd:f3:e5:aa:b0:f6:40:1f:66:
8b:61:cc:47:0d:de:f8:51:72:77:30:54:58:2a:5b:
52:01:73:70:9f:0c:eb:36:09:ad:1e:b7:51:05:2c:
d6:51:4a:38:70:9a:71:ff:bb:64:5b:5a:0e:b3:d9:
76:f4:83:e2:64:03:83:ca:b5:4f:92:80:82:be:83:
f6:c8:b8:41:2e:db:dc:8a:87:3f:6e:69:48:66:8e:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:05:B8:53:3C:7A:51:A2:B5:8C:04:9F:D3:62:B1:18:F7:24:60
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:7f:a3:09:15:95:c8:69:3a:26:7e:ee:bb:11:a5:22:d4:c9:
4b:b0:a9:d6:76:d8:be:35:94:60:52:83:e5:05:3e:1d:fd:9b:
6f:81:1a:44:76:46:4a:30:70:d2:9a:1a:28:82:09:09:2d:a3:
d4:9c:e5:13:a6:25:fe:da:d8:7e:0e:8a:e1:f5:70:b0:27:c8:
2c:b2:86:3b:f8:8b:39:be:e6:82:c0:cb:48:70:26:c4:01:75:
80:d2:b7:5a:22:45:0b:bf:fd:d9:40:61:46:42:01:64:63:ef:
ca:75:cf:10:17:6d:63:a4:da:eb:d3:db:7e:a1:60:7d:f7:c8:
bb:58:a6:70:11:df:5b:7b:76:54:af:74:b2:3a:88:0d:e0:02:
55:59:7d:52:cc:cb:63:34:a3:37:26:05:b2:3e:e1:93:22:0c:
72:40:e2:08:f2:e0:ae:73:af:ed:d0:e3:0a:fe:86:bf:24:74:
bc:f0:ef:f3:16:86:1c:12:04:36:bb:23:85:26:25:53:53:9d:
b9:f9:c6:f0:d2:33:c5:7d:d0:4d:0b:13:78:20:1a:99:5f:48:
ef:fc:a7:91:b3:bd:ad:b4:15:99:92:2e:ae:3d:f4:35:d8:ad:
6d:5c:bc:a7:bc:61:0b:51:f7:5a:91:36:4f:c9:9d:d8:6e:53:
cc:7d:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:53:59 2025 by rpki-client