Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: GlmYvSPFYlRKqyIJcGw5OVW+pWpVnoSuMPhNLySH9Dg=
Subject key identifier: A6:16:33:58:F8:94:99:10:0A:66:F3:AA:23:9B:1C:E5:89:C2:A8:C2
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 01974B1FC99C46528ABFDBA0137BE3CA5ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 16:01:03 +0000
Manifest this update: Sat 07 Jun 2025 16:01:03 +0000
Manifest next update: Sun 08 Jun 2025 16:01:03 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: 4tPrRjmIAre5LIysl6/62UAmpYmbXZNdoeyf55kBhZM=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:c9:9c:46:52:8a:bf:db:a0:13:7b:e3:ca:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jun 7 16:01:03 2025 GMT
Not After : Jun 8 16:01:03 2025 GMT
Subject: CN=a6163358f89499100a66f3aa239b1ce589c2a8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:3d:62:92:ad:51:63:4f:02:11:f5:ab:c8:
ac:41:0e:e3:23:a1:7c:ee:1d:f8:89:2c:69:b6:42:
62:2d:95:b5:88:80:13:4c:94:6e:74:41:c7:67:53:
8a:15:1f:54:1c:7a:ce:13:c8:1c:d4:36:b2:ac:14:
58:fb:78:3f:87:db:29:f5:e4:29:ae:f7:42:39:ae:
c1:17:33:0c:cb:58:6c:81:fc:63:0f:0d:42:16:f2:
dc:7c:88:9b:17:b4:53:b8:42:0b:90:26:2c:08:72:
8d:61:03:cf:da:1c:a0:bd:2b:b6:38:89:e5:07:58:
a6:cd:07:13:0f:e5:8c:75:5d:ac:37:f5:b2:79:a3:
d3:e5:2d:86:a1:30:f4:10:46:ae:0e:55:bd:d4:b8:
ee:7e:a7:f4:1f:2b:b6:46:68:52:f4:ce:58:19:cb:
44:3f:d5:cc:02:07:bf:bf:6a:d8:31:fb:c7:1a:d4:
4c:b4:0d:6e:8d:26:9f:73:0f:00:36:7d:0c:dc:92:
6a:31:74:88:1a:ed:d6:70:b2:5f:37:f5:7a:58:b4:
e2:0c:76:0f:25:c4:33:7a:17:f9:1d:12:0b:da:ca:
15:85:22:bc:01:79:6e:c8:ba:ca:e2:e7:71:c9:2d:
33:54:a1:fe:31:8b:e3:22:b1:cc:31:77:72:83:f7:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:33:58:F8:94:99:10:0A:66:F3:AA:23:9B:1C:E5:89:C2:A8:C2
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:f3:32:1a:5f:70:1e:eb:d1:eb:4a:45:cb:85:57:16:9b:
3e:62:c7:b3:35:2a:c0:be:d1:2f:13:ad:8f:6d:a8:70:9f:2c:
49:68:4b:01:8a:76:90:14:32:fe:cd:3d:fe:19:00:c4:56:3c:
ac:1e:6d:88:51:83:1e:e5:13:c8:82:05:9a:c5:fd:14:9e:d0:
d6:68:57:ed:2f:db:72:e6:79:f1:6f:0a:b7:79:b9:8d:5e:35:
14:02:82:76:08:56:de:34:a9:76:a9:18:0a:27:74:cd:06:4f:
50:69:60:fa:09:2a:f1:e0:bf:cb:18:ea:ff:44:29:aa:e1:10:
bf:bf:11:21:c5:e3:1d:d3:53:3c:17:a5:5a:f4:56:32:90:71:
d6:0c:e6:ed:94:33:fe:95:d5:86:71:75:eb:d0:8b:58:9f:c7:
33:5f:0d:79:2f:21:ac:21:6d:bf:ee:35:74:31:4f:5e:21:fe:
e5:8c:4d:0d:c4:58:af:34:a2:c3:47:a7:49:7e:6d:ea:a2:c0:
94:d4:70:72:af:26:56:3c:11:8e:2a:d4:3b:85:87:b3:e3:00:
f6:af:90:d9:6e:cf:f4:75:1d:e7:85:e6:cd:7e:58:ec:b7:c6:
22:cd:c5:7f:5a:9a:5e:eb:a7:44:e8:99:0d:6a:61:07:b6:d9:
55:e4:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:29 2025 by rpki-client