Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: oYO1xM9y8EbA3Ct5Jg8gOUhGr0Bi+MD6+x4krqA0hzY=
Subject key identifier: FA:47:D8:EA:86:04:AE:B2:B1:F4:E2:A9:FF:60:FA:F1:38:8F:0C:2E
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019748C304FC86FC424EC5C8F4F9DF964D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 05:00:29 +0000
Manifest this update: Sat 07 Jun 2025 05:00:29 +0000
Manifest next update: Sun 08 Jun 2025 05:00:29 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: /jEzCaaLyTs7RMcZZlsJl0knZy4Rl/13TMJLddTkFW0=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:04:fc:86:fc:42:4e:c5:c8:f4:f9:df:96:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jun 7 05:00:29 2025 GMT
Not After : Jun 8 05:00:29 2025 GMT
Subject: CN=fa47d8ea8604aeb2b1f4e2a9ff60faf1388f0c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:92:1d:06:73:2d:fd:46:45:31:e9:a7:fe:
aa:98:8b:4b:65:08:7e:8a:16:4a:29:73:14:1b:66:
28:08:72:e8:8f:70:84:88:c2:44:7f:f6:e5:17:3d:
f9:40:13:a6:ee:6c:23:47:c8:20:f7:54:03:ed:de:
22:e8:a0:b1:c9:40:db:2f:6c:f5:ba:b3:e8:da:46:
27:63:40:6d:3c:c5:a1:72:79:b5:34:7a:d4:b4:db:
8e:b4:80:fd:f2:b9:ba:97:dd:55:d9:a4:3a:5b:43:
ce:43:e4:9a:bd:71:53:0f:f8:06:07:0f:c8:99:03:
e1:b8:e2:ce:80:5a:48:6e:83:6a:4f:5b:5c:47:7d:
d5:f8:9a:95:8b:b1:fc:c1:91:da:9e:14:48:9d:84:
08:67:2d:b0:c9:d9:65:51:bc:7c:f1:88:d2:d0:f2:
da:1a:3c:09:31:a1:a0:c5:ce:0e:ce:58:62:8a:b2:
ca:4e:bd:6e:20:c9:d1:4b:0e:54:7c:a7:9c:61:ac:
ff:1a:e5:a6:77:dd:8d:2f:11:f0:f4:99:6b:53:36:
ed:f4:f7:eb:b4:f1:0d:1c:fc:60:01:57:63:3e:51:
7c:98:4c:97:5b:6a:59:ea:3d:21:fe:52:b3:79:4b:
d3:58:cc:15:58:4e:87:94:17:28:fe:d7:07:e5:5e:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:D8:EA:86:04:AE:B2:B1:F4:E2:A9:FF:60:FA:F1:38:8F:0C:2E
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c8:76:06:f6:c8:f6:bc:5c:ac:9e:73:a4:04:48:62:32:bd:
fd:bd:dc:95:1c:22:18:47:0c:22:06:76:d8:08:92:07:58:7c:
e0:52:b2:bd:1d:12:33:04:3d:26:57:b3:ff:d0:40:d9:89:58:
b5:27:bf:99:1d:fe:50:a9:91:d7:58:e2:d9:7d:ae:89:60:72:
16:a1:c4:39:fb:c2:30:d5:0b:fd:f6:0e:ed:2f:77:0f:0e:75:
87:49:80:ea:20:69:d1:30:61:1c:1b:24:d4:a6:c7:93:0e:84:
4f:36:68:d4:71:3f:00:74:d0:74:ff:a8:e3:71:0f:08:03:95:
14:4b:0d:cc:27:a1:3c:27:86:cc:3e:5a:5a:0d:c2:e6:b6:27:
26:dc:43:0b:76:d5:9d:74:d9:8f:67:6a:92:1c:22:65:fa:87:
d0:bc:81:cf:a3:ae:74:0c:8e:40:9f:f1:d7:88:dd:57:0b:69:
ce:16:79:23:3c:92:b6:a1:27:d1:6f:70:91:99:c5:69:36:77:
37:2d:5a:56:7f:eb:65:13:a8:6f:aa:eb:d0:86:21:a9:44:a0:
39:81:fd:5b:bd:79:56:14:e8:73:b6:4e:88:e5:20:dd:32:c8:
6c:bf:c2:48:5c:d7:01:10:76:a8:09:72:16:90:bf:7f:c0:a8:
ca:b2:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:30 2025 by rpki-client