Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: vNknv3JwFFOuBUklfllF/eI9bRBFVmzdms5ecBNYLH0=
Subject key identifier: 78:1E:30:57:D3:F0:D3:19:C2:7B:2B:41:C2:98:21:1D:8F:AB:20:04
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 01976D3E91235975648AFA42D27EA7D96414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 07:01:46 +0000
Manifest this update: Sat 14 Jun 2025 07:01:46 +0000
Manifest next update: Sun 15 Jun 2025 07:01:46 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: MX+EkL0OkobDyx04HU4dvtdnq0y+sRRCfdEwWwJbg98=)
2: QrmnbjgSygFDWHsO09VpW_iZC0c.roa (hash: VHw1+Cgx8Es+YaWERxb3+M1gB2Ndwqk8aRAjsalZIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:91:23:59:75:64:8a:fa:42:d2:7e:a7:d9:64:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Jun 14 07:01:46 2025 GMT
Not After : Jun 15 07:01:46 2025 GMT
Subject: CN=781e3057d3f0d319c27b2b41c298211d8fab2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:98:d2:8f:ef:a6:92:0b:74:64:b4:68:61:
c9:cb:ed:d6:42:9b:8b:95:bf:72:af:12:c2:59:c5:
ab:5c:f6:a7:d5:41:55:58:88:cf:e9:8e:07:9e:84:
63:8f:6f:46:79:0f:f5:96:ac:87:10:1d:28:d0:06:
4c:d8:9d:e2:15:55:aa:b6:43:60:d4:ef:fa:9e:d0:
9e:01:30:21:f1:24:7e:b0:62:a5:a5:c3:e3:81:00:
78:88:34:f0:04:90:eb:c8:10:46:52:48:48:88:d8:
4b:af:46:57:06:06:2d:84:40:46:df:56:c2:54:0c:
d9:04:7e:4a:32:60:a9:1c:17:0c:88:32:48:17:14:
72:0d:af:31:ef:0a:4c:9f:6c:30:08:17:42:33:26:
9a:f0:8e:7a:d6:dd:db:33:4c:be:15:0d:a5:bd:8c:
2b:e8:6b:30:97:00:a4:1b:9e:34:2f:cd:04:e7:0f:
da:81:d8:17:88:f0:d0:5e:5b:5e:9d:13:e3:a5:07:
ad:2f:d7:a9:47:a2:79:8c:66:06:bc:0f:27:33:ce:
a8:19:53:f8:3c:e2:ec:8f:20:be:5e:7f:76:59:ae:
37:30:f9:3c:b7:b3:f2:13:d3:9c:11:95:37:7e:5e:
01:ce:dc:ab:42:e7:e3:2d:57:01:df:0e:ee:5d:cd:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:30:57:D3:F0:D3:19:C2:7B:2B:41:C2:98:21:1D:8F:AB:20:04
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:93:4a:03:2e:19:91:f4:7f:2d:11:82:3c:65:72:3f:62:ca:
2f:d2:fe:ae:cd:03:82:ac:19:66:0c:16:a9:c6:2e:93:1a:b5:
af:8d:7f:f6:a6:64:3a:58:7c:7a:db:dc:05:25:63:c1:31:98:
b1:0e:52:16:12:cd:18:45:ad:72:b9:47:89:c5:44:74:ae:8c:
d4:0d:54:01:d5:7f:80:b0:41:6a:8d:a7:36:50:e3:54:28:20:
53:9b:15:6b:cf:4a:47:35:50:b9:44:a6:9f:74:44:e5:36:f2:
ba:f2:3c:a8:df:90:1b:d8:17:b3:68:b3:15:ad:c6:0e:28:a0:
d6:95:8a:c0:a2:a8:fd:b0:c4:a4:13:a5:7b:08:2a:d6:b3:78:
93:85:ac:11:d6:b6:3d:75:61:97:21:9c:6d:4d:c0:a4:14:09:
55:32:99:83:1d:89:ec:fa:8d:13:15:e9:2e:80:9b:61:a4:42:
86:b4:60:89:05:e9:a7:4a:6d:72:20:ab:3a:7f:cb:5e:ad:c3:
65:ff:1e:ad:18:88:80:30:e9:b2:66:e6:ce:23:f5:d4:f0:17:
41:f8:99:cc:54:c4:4c:d5:df:b1:33:7a:06:fd:c9:9d:ba:c6:
17:a9:1f:cb:8b:6c:ac:5c:2f:2f:08:2e:c4:04:0c:ca:86:32:
33:85:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:35:59 2025 by rpki-client