Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: TYOwpWfCuYam6ELlce4AOpcFxYvigtK9ZRIHOPp/30I=
Subject key identifier: 4A:84:12:57:C0:0F:B2:F6:21:38:B2:E1:0F:04:32:35:37:AD:C1:A1
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 01976D3DFED07EBBB64F74577647210D8D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0A35
Signing time: Sat 14 Jun 2025 07:01:08 +0000
Manifest this update: Sat 14 Jun 2025 07:01:08 +0000
Manifest next update: Sun 15 Jun 2025 07:01:08 +0000
Files and hashes: 1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: vM0GNdVrdcKUXnRYfjLfIrsc3zIgv7VPqIhxX6ZAjPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fe:d0:7e:bb:b6:4f:74:57:76:47:21:0d:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Jun 14 07:01:08 2025 GMT
Not After : Jun 15 07:01:08 2025 GMT
Subject: CN=4a841257c00fb2f62138b2e10f04323537adc1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:13:19:fb:57:d8:a5:21:05:da:86:7f:e6:
68:1e:4d:18:15:58:df:68:b4:12:17:55:76:e3:ff:
5e:fb:8e:5e:ad:37:c5:84:71:1a:d9:57:56:33:cb:
7b:5e:6e:89:89:fc:a8:aa:30:f7:8c:3e:91:25:70:
16:88:f3:5b:01:23:ca:fa:f8:0d:89:dd:1e:0e:f2:
ab:43:d9:eb:d8:83:f5:a3:07:39:24:09:07:cb:b9:
73:e1:97:95:2d:78:a0:16:00:fa:2d:bd:c0:06:7b:
44:d4:77:e9:c9:90:95:03:d1:2f:11:ff:b4:00:0a:
fd:b5:a4:09:24:a3:0e:ca:c4:bc:8c:1c:af:c4:42:
5e:3a:bd:32:7a:1f:bf:37:0c:d6:bc:c3:d2:f6:c3:
d3:2f:97:47:b8:1b:10:49:9b:74:2c:e6:89:9b:e7:
b3:11:34:c9:4b:d1:b4:a7:be:d8:db:1f:14:8c:ff:
b4:94:53:e5:44:56:ca:a4:56:f5:8c:84:d2:b1:3a:
30:76:04:f5:0f:2d:de:69:54:f2:65:dc:cb:ca:fb:
9a:e4:e9:2b:63:2f:ac:12:64:0e:99:7f:a8:cd:fb:
e1:aa:84:ac:23:42:d2:ab:47:15:51:63:8a:77:86:
85:dd:07:da:2e:be:ba:38:5d:70:bb:6b:b1:22:5b:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:12:57:C0:0F:B2:F6:21:38:B2:E1:0F:04:32:35:37:AD:C1:A1
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ce:c6:47:1c:4c:cd:1d:6e:fb:98:bf:25:4a:07:38:fa:6f:
86:ce:2e:76:a1:39:9d:23:1a:9b:d8:f7:0b:73:11:0f:e0:bc:
2c:b6:5e:7f:81:6b:fe:f0:f3:2d:c6:5b:cc:28:20:80:ff:3c:
a6:0d:af:11:19:45:6f:93:ad:a7:05:c1:b8:1a:a8:9b:05:03:
52:37:32:41:16:ca:83:5b:dc:6a:15:1c:85:e8:21:8e:28:a8:
5e:70:ca:04:48:b8:1f:5a:75:da:86:4d:95:80:a6:d3:e0:40:
4c:19:60:44:38:78:4c:97:36:bd:6b:cf:b8:f8:e6:d3:8f:43:
79:e4:33:3a:35:50:1b:22:1f:0b:e2:54:34:56:6c:df:ad:80:
04:3a:c4:54:df:00:e5:82:a1:aa:9a:de:24:1e:24:54:4f:5f:
14:d5:f4:7e:39:df:44:ee:93:ed:77:75:5c:40:55:77:82:92:
ec:93:96:77:b7:fc:f8:29:3d:b8:7b:da:c6:09:55:74:21:08:
38:cf:11:c4:02:16:25:40:6e:9a:55:43:3c:26:cf:2e:e6:94:
22:13:a4:99:fa:94:76:e0:d1:de:68:1e:60:aa:fc:3b:3b:c0:
d6:37:32:b9:7a:de:2b:fb:bd:8f:f3:92:23:f2:66:a1:43:13:
e2:20:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:46 2025 by rpki-client