Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: nGvzQlK4LLpq2jBgZ7CzkJQCxQR+L4vyASLLGelITmY=
Subject key identifier: E7:29:8F:BB:EE:F7:1D:12:33:18:29:F4:A8:C6:8B:E5:40:BF:BD:AA
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019770078EC667EFAE2DEBEE17F8870526B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0F36
Signing time: Sat 14 Jun 2025 20:00:32 +0000
Manifest this update: Sat 14 Jun 2025 20:00:32 +0000
Manifest next update: Sun 15 Jun 2025 20:00:32 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: ihql0StYLMUjpwnYrHdOZneIAGnYQVr08/0Yi2i1lHE=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:8e:c6:67:ef:ae:2d:eb:ee:17:f8:87:05:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jun 14 20:00:32 2025 GMT
Not After : Jun 15 20:00:32 2025 GMT
Subject: CN=e7298fbbeef71d12331829f4a8c68be540bfbdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:cd:f5:78:56:9e:a6:ff:44:94:68:dc:7e:
b2:15:9f:66:ac:0c:4f:23:1e:88:fe:94:2e:4a:2f:
52:cf:9b:77:99:28:86:c4:6c:29:c0:fd:b1:46:26:
fe:9f:62:a5:27:8b:c8:01:75:34:01:bb:ef:69:8e:
29:83:ea:c5:46:df:48:97:53:6d:a2:e8:b4:30:7e:
75:6f:6b:c4:54:3e:dd:57:eb:90:a4:72:e6:94:5e:
82:48:7d:43:f9:40:31:f7:32:16:a5:ca:b4:22:08:
38:7d:d9:25:f5:f1:8e:83:a8:66:8f:8d:4e:9b:fd:
bc:33:81:53:da:fe:dc:c8:a2:e4:28:3a:f9:c7:34:
27:62:cf:6c:51:a4:23:c2:9c:ce:50:70:f6:04:88:
8d:30:be:72:a0:6c:9f:3d:95:13:d2:25:6b:16:b2:
50:ba:53:b6:af:25:b8:e2:ed:57:9f:86:13:c7:b1:
2c:38:cb:01:a1:c2:ff:bc:ac:dc:2f:45:c3:78:0f:
bf:77:78:0a:f6:ea:a4:14:fc:90:5e:d3:64:f3:11:
20:c6:55:3b:3d:95:dd:3f:9d:b1:e6:bb:d0:b8:f6:
d6:7f:de:ad:5c:06:40:37:2e:69:02:dc:46:bd:c8:
7c:61:2c:56:7d:89:ba:71:8c:91:97:4d:75:45:c3:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:29:8F:BB:EE:F7:1D:12:33:18:29:F4:A8:C6:8B:E5:40:BF:BD:AA
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f5:27:fd:94:6f:12:5c:0e:c0:ec:22:51:1d:f7:b0:98:99:
28:a4:39:a1:da:25:a0:14:3b:25:e4:76:ce:c5:f6:82:30:dc:
49:a7:84:2d:67:b0:ac:7c:6f:42:46:5a:41:d2:f0:45:31:ad:
dd:09:81:d5:4f:fa:fa:12:b7:ae:27:5d:bb:aa:ca:f8:87:7b:
4c:7d:9d:f3:25:6d:59:30:48:28:56:cb:1a:cd:08:62:9d:7f:
be:29:a1:8f:ce:c1:59:7f:7a:d0:f7:32:f3:b2:3d:ec:cd:21:
0d:8e:82:43:80:75:8d:6d:23:0b:79:fc:f5:9c:0d:8f:36:bf:
4c:73:6a:d3:cd:ef:54:43:2e:4b:45:bf:91:60:a2:a4:52:ba:
f4:1a:9c:15:da:88:0c:b9:2b:61:2d:b9:cc:ed:e3:05:95:32:
d4:6d:65:6e:ac:ba:fa:77:fc:52:c8:cd:92:a0:76:e3:7d:cf:
2e:14:f4:01:32:b4:b0:25:14:52:06:01:1b:63:73:69:92:51:
fe:d7:d7:31:62:e9:47:43:5a:af:1f:ec:48:d2:32:b9:b0:e7:
e0:d2:f5:d2:66:8f:d7:47:11:1a:2e:44:50:65:c3:a8:45:b6:
75:9b:f4:0b:16:2f:5d:6e:ab:53:bc:f3:fd:82:ce:7d:4d:0f:
7d:37:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:31 2025 by rpki-client