Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: QhJtLcz5NZTCoOVExL20T3EVfok7hPm/7jKMK+NceHE=
Subject key identifier: B9:C6:92:17:80:F3:20:4B:5B:16:56:66:A3:89:02:24:21:A5:6F:95
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01974D7BD04630C58C3C0A67B5BC35A41C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 10BF
Signing time: Sun 08 Jun 2025 03:00:49 +0000
Manifest this update: Sun 08 Jun 2025 03:00:49 +0000
Manifest next update: Mon 09 Jun 2025 03:00:49 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: YkgOCl5uozZLB3euIO5wZsbWpWx1Pa6k+XX0KDUEJLI=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:d0:46:30:c5:8c:3c:0a:67:b5:bc:35:a4:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jun 8 03:00:49 2025 GMT
Not After : Jun 9 03:00:49 2025 GMT
Subject: CN=b9c6921780f3204b5b165666a389022421a56f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:3e:60:82:68:bb:4c:d6:ec:de:d5:9b:2d:
b9:12:18:58:f3:93:82:f9:a8:3c:5e:07:40:5f:44:
8c:ea:29:26:ae:af:c0:03:20:c7:e9:f2:31:09:e0:
47:01:bd:60:af:8a:1d:f8:e1:1a:bb:9f:94:f7:15:
68:08:d1:9a:91:b1:8b:41:13:52:c0:dc:2f:39:f5:
b4:79:cd:60:1d:33:43:f0:d8:17:19:ee:e2:c3:b2:
8d:5d:93:ac:56:0e:3b:72:6c:50:e7:7b:98:a7:e4:
dc:1b:ff:67:eb:d7:5c:67:bf:a6:fb:b1:13:e8:f1:
f3:c4:01:d8:4b:0e:c3:83:af:3b:61:eb:87:32:14:
c4:68:41:31:f2:93:21:65:9d:7d:2d:a6:6b:ce:9a:
07:51:ad:27:ed:b0:86:bd:f7:c5:e8:55:9e:c9:e0:
59:06:56:51:e4:c5:2f:b5:3a:d9:88:ae:dd:47:ac:
52:06:45:e6:fc:0b:f3:5e:35:b8:f7:40:a0:f9:a4:
d7:8d:0e:4d:1b:77:22:58:f6:1a:7a:39:6c:b5:68:
c1:08:f1:97:e7:30:73:64:f3:ae:ac:8c:33:cb:bb:
5c:ff:be:21:39:ae:e3:4f:9a:f4:87:55:da:d2:ad:
91:87:88:07:ba:74:9e:e0:c5:ae:d6:b8:19:18:7d:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C6:92:17:80:F3:20:4B:5B:16:56:66:A3:89:02:24:21:A5:6F:95
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bf:c5:46:00:a5:71:ff:74:b0:ac:5c:da:b7:98:86:4e:68:
ee:3f:16:ee:de:fe:a6:ac:e0:5c:c9:7b:4f:85:8c:bc:7c:13:
41:31:33:2b:83:d0:32:b4:28:21:03:50:8a:08:93:e9:0a:25:
d9:64:d2:4c:b9:b5:c8:44:65:f3:1a:94:67:2e:2c:6f:60:a5:
4d:04:3b:57:99:00:db:6d:6b:72:05:85:a6:c2:64:7f:c4:41:
f4:ff:d4:df:d9:53:73:e9:b6:d8:d9:0b:2d:71:7f:3d:c8:74:
27:4b:d1:48:8e:95:c1:f7:98:3a:35:4b:75:23:11:21:94:88:
9f:56:39:b7:07:ad:22:ad:88:ef:73:bd:78:02:7d:14:da:3d:
b6:2a:dd:d9:c6:26:8a:62:d1:5e:61:bf:3a:6a:8d:c3:a3:7b:
85:f8:0c:a0:cd:6e:fa:be:7b:b8:8e:c6:1d:98:c3:2c:8e:00:
cc:b5:e4:46:57:e8:53:89:4f:7a:e9:5c:b4:01:5b:9b:e0:02:
cb:47:5a:82:57:9e:7b:c8:ad:87:8f:6e:51:3c:72:e8:18:13:
0f:60:a4:e1:84:d7:36:65:8f:e1:96:28:7f:48:35:06:d1:fe:
07:14:54:82:f7:0c:5d:f6:28:45:19:6d:36:3d:7f:e9:cc:e2:
be:5b:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:14 2025 by rpki-client