Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: ie8Q6whmvvSctKsD0yz1ERPVbW/TmvddUoFREXm21Ok=
Subject key identifier: DA:2C:3B:D3:93:12:45:65:DC:23:31:D2:CF:FE:CC:A9:5F:07:0F:0C
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 01974779AFAC12CCA034A9F898ABE82A6D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1554
Signing time: Fri 06 Jun 2025 23:00:46 +0000
Manifest this update: Fri 06 Jun 2025 23:00:46 +0000
Manifest next update: Sat 07 Jun 2025 23:00:46 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: IxHschzxnxQypQDA5dfj694IxpLN3xqp81TawGZH7QY=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:af:ac:12:cc:a0:34:a9:f8:98:ab:e8:2a:6d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Jun 6 23:00:46 2025 GMT
Not After : Jun 7 23:00:46 2025 GMT
Subject: CN=da2c3bd393124565dc2331d2cffecca95f070f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:49:15:3e:7a:c8:ef:7f:88:4a:2a:5b:fe:
fe:22:59:40:2b:cc:e9:2b:69:8c:ff:7f:04:40:a7:
f8:38:e5:55:5f:a3:22:5c:be:6a:0d:40:21:95:eb:
eb:64:5d:f9:06:ea:6b:95:c6:b4:f9:38:98:2e:ad:
0e:b5:8b:4f:b9:4a:05:f9:0b:ce:db:14:fa:1f:1d:
e3:a7:3e:7a:15:cc:42:82:52:91:0c:3b:d7:2a:5d:
45:ff:a7:43:6d:5f:1b:71:95:fb:d5:6a:6e:da:5e:
6d:f4:87:17:78:cd:d9:f2:89:be:e4:3b:85:5b:43:
40:3c:16:a8:45:db:0a:37:0f:4e:8a:ad:4c:ed:87:
6c:89:e3:72:16:e5:05:2b:6d:79:77:67:a7:87:fe:
ae:fd:15:76:84:23:c1:7e:e7:bf:da:e9:13:a8:43:
1d:df:f3:df:d8:ab:cd:4b:9f:87:dd:f9:ff:66:c3:
db:b3:f0:79:d8:75:44:95:d3:f3:62:78:70:29:ec:
cf:72:68:10:11:83:68:57:9c:65:a8:5c:d6:26:f3:
57:8b:d8:81:1a:c2:32:b0:40:60:7f:ee:f2:b3:8d:
7a:91:b2:7f:b8:13:ef:90:40:1c:bf:b1:05:e4:f3:
54:89:8c:23:06:d6:54:21:72:1b:33:a5:6e:68:10:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:3B:D3:93:12:45:65:DC:23:31:D2:CF:FE:CC:A9:5F:07:0F:0C
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:23:c5:eb:c5:65:3f:2e:5a:b6:0d:b0:25:ab:c5:a1:e2:db:
2f:34:59:bf:d2:3d:d3:2d:a2:f7:b8:af:9f:2d:a3:88:5d:f5:
e7:72:d8:ca:0d:1c:0d:29:8a:1c:89:90:b2:86:3c:bd:c8:fc:
6d:6a:db:50:0c:c0:db:78:1f:6c:92:1d:3f:f0:7f:42:ad:00:
c6:16:49:b1:b4:e6:35:c0:90:2b:14:aa:85:4d:e0:8f:9f:39:
e8:67:cf:7d:3d:79:4a:4e:62:21:6c:e1:30:94:26:fb:0f:d9:
d7:ec:eb:0c:6f:4b:5c:17:de:7c:81:71:b9:4f:a5:56:fd:75:
46:05:4f:9f:1c:8a:be:46:10:04:83:22:d6:0d:b1:35:89:d1:
80:6c:b0:49:95:d8:0a:53:b0:af:e8:21:91:e9:ba:4c:aa:6a:
3a:fd:ca:c2:bf:d3:9c:d9:d4:58:30:07:0d:b3:99:c0:91:e4:
99:55:f7:e5:cb:e1:ab:78:d0:a5:5f:ba:71:a5:2f:89:c0:50:
d0:da:c5:2a:fd:05:a9:1a:86:cb:47:79:42:8c:64:70:69:d7:
d2:ee:7e:31:7a:98:cd:61:6f:a2:f1:56:00:b5:f4:57:fa:d9:
9e:da:57:1e:7a:b7:91:4d:98:c3:3a:8f:2e:0c:01:dc:e8:58:
ad:8e:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:02:33 2025 by rpki-client