Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: chWRZfuknZGGrU5yoeO416VZ4PpdVIb65ksx1xxrHzc=
Subject key identifier: 7B:0D:FF:91:63:97:C1:6F:CB:B2:F5:6C:9A:C8:3E:B3:D9:15:F1:BB
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 019749684B0B407AF342E292D016BC111B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 158D
Signing time: Sat 07 Jun 2025 08:01:00 +0000
Manifest this update: Sat 07 Jun 2025 08:01:00 +0000
Manifest next update: Sun 08 Jun 2025 08:01:00 +0000
Files and hashes: 1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: NG7YyERHpiuqxAielT68qzcbL5orP9kxwFbuWWfKYQw=)
2: 4TacCA5fNMvJzrQKHYvZp1FsTCY.roa (hash: PoM3PiM+eiQs0IrTl3gGzaDWCG/B3yTTKS+dLnu4Yd0=)
3: 7NaNhfKzkHk-4U6P-rr5I2f5Dns.roa (hash: ho2GvZ21Aa+NkGp3FzrcTvxIRbuhiRhcV51nfQsaRvI=)
4: RMqD4QZBwk_wzHsp1loeMRU2jMk.roa (hash: nCQ5Eq/Er1do1Gz84LWpqzugPw71HtroPiJZlZhFk8k=)
5: naw_j5gKrLLjpLmDjj2VeLVHcW0.roa (hash: 9rsCrKDYxMlNCKWks8aC7H+vNumWPUdz18CO2dwuUHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:4b:0b:40:7a:f3:42:e2:92:d0:16:bc:11:1b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Jun 7 08:01:00 2025 GMT
Not After : Jun 8 08:01:00 2025 GMT
Subject: CN=7b0dff916397c16fcbb2f56c9ac83eb3d915f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:a4:c2:46:61:8c:72:be:85:1c:3e:08:c2:
9b:37:fa:75:ee:51:9b:48:ce:13:93:8c:31:a4:8b:
a8:25:d3:92:e7:59:c0:97:8b:9b:31:8f:d8:b5:75:
62:29:cb:e2:78:4c:ad:86:53:f9:6e:9e:f9:58:07:
16:fb:bf:fb:46:f6:b6:f6:13:78:91:71:f7:36:b0:
4e:26:e4:47:53:06:27:11:87:34:2f:60:e3:43:18:
9f:bc:d1:c8:93:0b:ec:41:fe:33:98:14:97:21:45:
d1:21:f2:80:df:bd:f2:7f:54:68:6f:1f:91:46:1c:
62:1a:dd:e6:34:65:d8:28:f7:d8:74:e5:4d:7d:56:
bc:d8:fb:d5:13:54:97:00:46:2d:89:a4:21:4a:49:
90:d9:61:51:ff:d6:ce:67:fe:c9:bc:64:93:cd:ff:
1d:ad:d1:05:fc:d1:2a:39:06:f7:cd:be:b9:6c:2c:
3f:62:ff:ff:f6:8d:52:9b:7d:99:78:af:9a:19:bf:
f9:7f:e8:27:51:29:3f:11:bd:22:b9:c2:7e:03:e3:
b7:ec:f4:20:5d:dc:b1:cc:a2:20:a1:7a:f0:b1:2d:
f5:5b:f8:f1:7b:e9:a7:ba:69:06:64:2a:44:9e:30:
59:65:22:1c:cb:03:b8:83:7a:a7:8d:fe:04:ee:5f:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:FF:91:63:97:C1:6F:CB:B2:F5:6C:9A:C8:3E:B3:D9:15:F1:BB
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:56:3d:16:c8:aa:8f:b0:48:0d:58:55:71:2f:81:dc:00:35:
b6:bb:6d:e7:f9:52:34:f6:1c:da:30:48:82:11:71:43:0c:40:
b4:28:46:f7:e0:1d:b9:40:d4:bf:83:ae:c0:da:b6:a8:86:13:
ac:35:fa:23:c3:5d:09:52:ae:39:17:e3:2f:9f:6e:93:c5:4d:
e3:c6:8d:0c:58:e1:6f:51:d8:92:88:53:51:2d:2b:38:85:d0:
f9:a2:c1:da:d2:e9:8c:82:59:5d:86:6e:04:0d:af:2c:95:3b:
1f:53:f3:ec:f0:a4:6f:b0:2e:f1:48:8e:ec:5a:4d:32:5b:46:
d8:47:db:2b:59:ae:a9:b9:21:71:2b:16:6d:60:9d:82:31:47:
47:c6:a5:b7:a0:a4:83:80:5c:5c:c5:8c:32:ad:10:df:08:bb:
aa:86:9a:4c:9d:90:7d:1f:b3:d6:31:eb:3b:27:76:2c:b4:ca:
a3:e9:b3:cf:ad:6a:cb:fd:13:70:03:f5:fe:56:3e:d6:0c:73:
4d:08:90:35:23:8a:b9:18:36:23:2c:27:34:1b:ec:ba:8f:42:
04:c1:5d:b0:54:cf:bf:ee:df:e5:5a:b0:02:24:d6:17:5f:67:
bc:30:b8:7d:4d:cb:ae:1c:3b:47:75:a2:9c:b4:c0:08:7f:93:
90:c1:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:23 2025 by rpki-client