Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: nU0o8zifZknwsIUkdvPm1DnNl7QYISLF9oyePfOJypw=
Subject key identifier: 03:71:CB:AA:8B:1C:67:81:2D:64:06:4E:0E:C2:3A:C8:93:7C:EF:44
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 0197711A8E0C74F0D8B69A778953710AB913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 08B3
Signing time: Sun 15 Jun 2025 01:00:55 +0000
Manifest this update: Sun 15 Jun 2025 01:00:55 +0000
Manifest next update: Mon 16 Jun 2025 01:00:55 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: ZRN0wcpipdOHRGMZV+s/JV0QZz77y7KB87Fu1xlz4qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:8e:0c:74:f0:d8:b6:9a:77:89:53:71:0a:b9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Jun 15 01:00:55 2025 GMT
Not After : Jun 16 01:00:55 2025 GMT
Subject: CN=0371cbaa8b1c67812d64064e0ec23ac8937cef44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:d3:8e:03:da:83:71:77:aa:d3:a4:97:11:
3e:2f:29:6d:91:62:24:23:7d:68:4d:8a:53:06:7e:
a8:45:96:6f:18:37:df:5c:d4:21:88:7d:f5:81:c9:
af:ec:d7:7d:88:42:45:34:63:d0:ae:98:f6:33:78:
4d:7a:be:24:5d:ea:fe:5d:df:01:59:6f:5f:51:0f:
a2:04:5c:4f:5b:b7:b5:56:0a:93:f1:23:1a:e7:55:
43:86:ac:72:cd:91:1a:78:d7:24:0d:7e:d6:2b:5d:
05:f5:61:61:dd:be:27:26:da:03:91:af:ef:41:cf:
b2:d4:e6:fe:8d:a3:8d:81:fa:2a:87:05:df:64:d8:
59:1a:00:db:0a:1e:c2:e2:86:8d:44:44:fa:5e:f9:
f6:e4:c9:9b:bc:a6:76:08:dc:56:d2:35:a0:88:c4:
c9:91:09:71:02:bb:e1:23:b6:07:e2:df:17:c1:54:
0b:a2:3c:45:f2:c0:73:3e:63:e3:57:87:4f:b9:80:
cf:f4:e5:40:a6:95:73:8b:ce:42:9a:f7:6d:6d:74:
94:3e:2c:49:ad:a7:fa:f3:d3:d5:ea:f3:c4:9f:e4:
46:95:28:33:22:36:39:c9:59:b7:89:b7:97:48:00:
2a:5f:af:f1:2c:c3:70:d3:90:8b:b3:6a:a2:a5:4b:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:CB:AA:8B:1C:67:81:2D:64:06:4E:0E:C2:3A:C8:93:7C:EF:44
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:79:33:7f:d2:54:d0:99:bb:54:00:d6:a4:77:84:27:0f:
cd:ad:3d:b8:7f:3d:f4:a5:6e:2f:31:a3:60:6a:0d:82:36:c4:
05:42:9b:52:80:84:e1:26:e9:ae:a6:82:6c:f7:86:d2:0a:40:
e4:88:9d:3d:07:68:14:0a:db:33:a9:10:29:cb:18:f6:fa:cd:
57:b9:75:be:cb:0a:21:f1:8a:fd:ab:70:ca:af:ff:10:1b:e5:
1e:78:e8:41:b1:44:61:c7:c3:b4:20:94:22:75:76:df:b4:da:
a6:f2:af:bb:54:2c:d3:5c:7e:aa:9d:38:01:20:e1:82:e9:aa:
92:c5:7e:0f:0a:60:07:25:39:93:69:3d:fa:d8:d2:89:91:8f:
6f:42:88:87:00:11:ba:b1:39:df:eb:ed:6b:17:3b:3f:01:c7:
da:43:0c:62:7d:a3:63:9d:ef:74:17:43:c3:4a:d1:11:70:c2:
92:29:75:70:c1:dd:f5:72:83:33:a3:f7:56:7a:96:a1:de:63:
58:4f:7e:73:a6:5c:b0:bb:34:98:74:bd:49:50:d0:73:19:23:
c4:2d:01:48:00:d0:79:da:4a:9b:95:45:24:71:35:18:17:26:
dd:16:6b:6b:05:8f:a8:64:67:e0:13:3c:33:19:f4:1e:ab:a4:
c2:05:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:46 2025 by rpki-client