Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: 3Heiw4DdhmU9TPH4yOBc21oNolQgXvYPWC42F2RF8m8=
Subject key identifier: 15:42:2D:D8:81:95:3E:7E:4F:63:55:2F:63:A7:4F:E7:8E:91:70:71
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 01974CA00CE9FE5B16C26599FE56F379B1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 0121
Signing time: Sat 07 Jun 2025 23:00:46 +0000
Manifest this update: Sat 07 Jun 2025 23:00:46 +0000
Manifest next update: Sun 08 Jun 2025 23:00:46 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: x3y8BcXBmLPVN+5DU8/5xrU8T8HL0x1Uh0gOVQU2ILs=)
2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=)
3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:0c:e9:fe:5b:16:c2:65:99:fe:56:f3:79:b1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Jun 7 23:00:46 2025 GMT
Not After : Jun 8 23:00:46 2025 GMT
Subject: CN=15422dd881953e7e4f63552f63a74fe78e917071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:11:2d:f3:fd:65:81:90:1b:3a:80:49:75:
1d:44:26:da:39:0f:00:b0:23:08:24:07:b1:c1:d7:
b2:4d:1b:e7:2d:83:b0:f5:18:8d:74:1c:8b:f5:fd:
9e:35:32:f0:37:d4:a3:87:5f:f4:12:49:7a:35:6c:
10:ec:3f:f0:b8:dc:10:62:d0:4d:60:55:48:57:0f:
39:76:ff:fc:72:33:6e:e0:63:b5:f4:4b:aa:5f:a3:
58:eb:be:ec:9c:ac:dc:a4:c4:3f:4f:5d:b1:7c:a3:
60:97:59:6e:c0:bc:aa:51:ab:21:e4:2f:f7:82:15:
45:8a:40:ec:f7:e7:df:19:f9:0a:86:a6:30:68:ad:
05:a7:5e:c7:68:0e:5d:90:fc:b7:51:01:0a:6b:db:
ba:6d:07:91:97:8a:bc:41:81:44:12:4b:21:d7:09:
1d:a9:7c:9d:67:69:8d:6d:af:9f:09:4c:23:45:f2:
07:b9:69:cb:ee:5a:2d:c2:75:56:85:67:a5:d1:d3:
87:e2:f5:2e:43:c1:af:e3:50:c9:75:b8:85:61:0e:
9e:84:3e:3d:fa:f5:d2:85:8c:39:14:a2:5e:0e:03:
32:5e:7a:83:db:1a:31:e0:d6:a4:d6:14:04:df:20:
46:a2:0c:f2:9d:3f:d2:d9:24:5e:be:d6:c6:e5:e1:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:42:2D:D8:81:95:3E:7E:4F:63:55:2F:63:A7:4F:E7:8E:91:70:71
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:c3:66:ba:fc:0c:e6:5f:69:d7:cb:f2:2c:90:f7:51:18:
9b:76:51:0a:2b:88:23:35:12:18:e4:fe:01:0e:6d:7d:fc:25:
95:8f:a1:d6:82:2c:85:b3:03:b6:35:98:0f:ae:18:88:72:15:
e1:3e:8a:5f:98:a6:81:ca:9b:7a:fc:35:30:07:04:e7:9c:c5:
4f:eb:2c:fb:d8:ec:f4:cd:4e:2b:83:13:c0:e5:42:d9:c7:f8:
cd:1f:9a:a0:9a:42:0b:80:34:78:60:bb:36:1f:a5:97:80:0c:
99:e0:fd:ba:68:c0:dd:7f:44:84:5e:b7:63:de:d8:3d:c7:d4:
da:61:6c:ab:29:5c:4e:b7:26:4b:e6:c1:24:a8:2a:dc:27:cf:
6b:44:3d:73:c5:45:99:c1:59:bd:36:ee:e1:c2:7b:1d:e9:71:
46:87:50:7e:be:3f:93:1b:23:af:fa:6a:28:b2:0c:f1:fe:2b:
6c:82:7f:10:25:e9:4e:02:90:3d:2d:e8:17:9a:33:19:bb:f7:
48:87:01:a4:c6:27:f5:1b:5f:46:11:29:34:b6:62:43:2c:da:
3f:4e:0b:ac:cb:76:ed:12:b9:b9:f1:78:d4:5e:7e:7d:95:39:
01:9b:9a:eb:dd:33:28:d1:b5:16:12:4b:9a:ad:ad:5c:08:98:
bb:ec:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:45:45 2025 by rpki-client