Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: 4X/GsW3+CctYsCBo3/Kop1ESLYWq5WCZi2iIkOJB/YY=
Subject key identifier: 97:90:9E:B1:5E:36:FE:5D:98:86:A6:7D:14:CB:15:7B:AB:32:DB:84
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 0197688524B0D434CA56C78D3D8D0E41386F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 09:00:45 +0000
Manifest this update: Fri 13 Jun 2025 09:00:45 +0000
Manifest next update: Sat 14 Jun 2025 09:00:45 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: 29sG1D+TER2AkAfXxM4LrpjPowpsiXCuYX0J0FzUTMM=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:24:b0:d4:34:ca:56:c7:8d:3d:8d:0e:41:38:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Jun 13 09:00:45 2025 GMT
Not After : Jun 14 09:00:45 2025 GMT
Subject: CN=97909eb15e36fe5d9886a67d14cb157bab32db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:fb:a8:e8:39:45:74:37:18:46:97:c4:8f:
39:b6:d7:36:8a:e9:9a:47:fa:4e:ad:b7:9e:b3:84:
41:5a:d2:81:19:8b:67:4b:47:1a:6a:f1:6f:ba:0a:
37:27:f9:3c:98:c5:37:7f:d4:02:89:51:08:b3:b5:
c1:cf:1f:cb:73:8e:e7:8b:c9:1b:7b:c1:79:ef:c7:
ff:47:cf:cd:a4:80:8f:cf:69:a6:83:27:be:fe:e3:
4f:a6:71:87:8e:94:05:c6:6b:31:3f:dc:f4:0c:23:
db:68:71:0b:2e:33:33:c1:94:f4:ae:a6:a2:9c:83:
02:13:b1:a8:68:a3:b4:99:cb:b4:2e:37:2c:f3:25:
a6:13:7e:91:2e:45:2f:a7:2f:56:2c:0b:02:6b:e4:
08:1e:20:70:33:1b:67:39:ba:94:81:b2:bd:90:13:
a3:bd:1a:a0:c1:4c:3d:58:86:f8:c8:ce:d4:c1:20:
44:2e:bf:ae:29:99:5b:75:6e:c8:ab:d8:d5:c5:40:
38:98:27:21:24:17:02:c6:14:aa:d3:37:aa:3d:8b:
82:6c:2c:d6:be:4b:ec:48:18:c1:4c:df:bc:0e:60:
26:84:3b:32:44:f8:8d:d7:37:1b:d6:b7:53:35:f9:
01:d5:0e:49:d7:49:46:bd:36:bc:b6:d2:2a:b6:cb:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:9E:B1:5E:36:FE:5D:98:86:A6:7D:14:CB:15:7B:AB:32:DB:84
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:71:29:30:bc:4a:7d:ef:85:27:05:71:80:58:8f:2b:eb:88:
7d:ec:00:36:37:f4:42:61:92:d0:8c:71:72:1a:48:8e:ff:23:
32:4f:ab:46:a0:5f:93:ca:fd:99:87:ad:80:24:0d:21:46:ed:
fe:43:f0:f3:cd:2b:2f:9f:69:5b:bf:a6:73:33:50:df:5a:05:
ad:5e:d0:bd:3f:23:0c:6b:55:6c:3e:c7:17:5b:bb:ba:f5:cc:
85:d3:7c:64:0c:1b:d9:b9:31:29:0d:fb:20:3b:84:0c:c3:11:
b8:15:aa:ba:46:eb:1b:a2:7c:97:85:02:2f:c5:0f:b8:10:95:
ff:c4:8d:f4:9b:7c:3d:06:03:d1:4c:51:91:fc:45:46:39:57:
1f:c8:e7:77:7a:12:26:bd:f5:70:d9:62:a0:e9:16:ac:53:29:
81:a3:86:47:2c:18:d5:93:5e:2e:b8:52:38:a8:08:b9:a3:22:
98:ae:be:3b:b9:d9:72:9b:ac:bc:78:b8:19:3c:c6:9d:04:ed:
3e:db:26:ef:8f:30:36:de:50:4e:e5:67:ef:0c:10:1c:78:1e:
c7:ba:b4:ad:49:bf:e7:37:40:88:f9:f1:31:1a:5f:e9:8f:05:
74:5d:91:97:0a:d8:58:87:2d:1c:93:df:c5:4d:7a:10:a0:20:
a8:f0:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:57 2025 by rpki-client