Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: t3r9oN8QEbmmbIDMc+A7pPIB01VcyGHIYI501dA8CXc=
Subject key identifier: 24:E4:C2:36:6A:42:E9:FB:B8:1A:0D:18:D4:B4:2A:0F:EA:A0:37:AD
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 01978B1124C12D4DD5D561D60479718363A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 02:00:45 +0000
Manifest this update: Fri 20 Jun 2025 02:00:45 +0000
Manifest next update: Sat 21 Jun 2025 02:00:45 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: IlKiGiIIvTjxNahaHkteqdhqxHAS1klv1Mv/cBMi2Js=)
2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:11:24:c1:2d:4d:d5:d5:61:d6:04:79:71:83:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jun 20 02:00:45 2025 GMT
Not After : Jun 21 02:00:45 2025 GMT
Subject: CN=24e4c2366a42e9fbb81a0d18d4b42a0feaa037ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:ee:92:96:ab:a5:fd:d4:e1:b2:33:55:a3:
0e:91:58:dd:f5:63:2c:b6:d3:9d:c1:c8:89:20:9f:
cf:70:a4:27:18:7a:04:7f:17:c2:fa:9d:77:e1:96:
b2:76:00:54:1a:01:fe:6c:c4:1a:44:26:79:9f:d1:
7b:bb:e9:fb:34:d6:94:1f:20:4f:1e:37:6f:d2:01:
db:3c:07:2b:d1:54:55:1a:29:7a:a0:fb:0a:d2:20:
84:eb:b8:55:c7:90:d3:c1:cc:02:5f:cc:0f:36:6b:
d2:a3:ea:d7:37:0e:df:8e:5a:fe:20:bc:b7:c6:91:
01:16:a6:44:cb:e4:b7:2b:b2:e1:2a:ad:11:29:d8:
c8:5a:5c:c3:53:b6:1c:28:57:60:ff:ce:cf:ea:02:
82:6e:48:9b:e2:02:f9:3a:55:45:f6:2f:64:31:08:
fe:3e:c0:b3:25:d8:d7:19:ff:88:31:cc:77:f9:1c:
75:78:42:b7:25:60:70:9d:0c:07:8d:ba:86:78:ef:
d7:78:17:7e:a7:49:bd:1d:f5:08:b1:41:eb:b0:57:
3b:56:84:68:78:7d:11:e0:2b:9d:4e:96:c3:2c:81:
23:03:09:f3:df:44:88:10:3d:36:14:36:2c:d9:1d:
c1:2b:9f:ca:2e:f2:37:71:15:e1:2f:1b:f9:fe:aa:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:C2:36:6A:42:E9:FB:B8:1A:0D:18:D4:B4:2A:0F:EA:A0:37:AD
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:da:6a:fa:b2:72:05:96:20:4c:04:c1:44:62:ee:0b:19:
e7:c6:f5:21:30:05:3e:07:ac:78:8a:de:4b:c3:b9:6c:df:df:
69:cb:c8:80:07:11:57:2b:60:dc:64:5c:62:a8:0e:21:bc:19:
4e:0c:f6:03:86:8b:d5:39:94:88:57:d4:a6:fc:e5:c2:bc:da:
10:81:50:ca:67:ee:81:e3:72:7c:de:2f:28:a1:e0:e1:c4:19:
87:f3:92:7c:30:aa:16:cd:ec:dc:b6:65:8b:8b:52:7b:7b:5c:
80:b2:32:f4:da:63:1c:47:3e:8c:16:0e:d3:a1:76:9f:66:fb:
c5:99:e6:51:44:de:20:bc:db:8e:a3:4b:bc:a9:a3:2b:af:52:
ec:ec:15:a3:de:d5:00:5c:b4:a9:d6:8c:7c:90:a7:fd:48:a7:
61:bb:06:2f:78:64:e9:89:3d:69:50:f9:0b:a0:db:2a:33:de:
86:0f:f4:e6:8b:a0:bb:e5:ce:6d:14:51:12:6c:20:aa:b7:bb:
fd:9a:3e:75:cb:0e:dd:5b:2d:1a:1f:f1:0a:5d:0a:21:22:6d:
6b:a1:6e:a6:e4:2f:06:2b:5b:1e:5a:f7:46:ad:56:70:b8:9d:
ff:e4:61:9f:04:f4:03:ca:18:78:bc:41:22:cc:6a:51:d3:d1:
bc:c0:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 09:26:24 2025 by rpki-client