Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: jGJaXEmvy36sYIjWAmMesWcBQpWX3sUKUuY6kPlhvOw=
Subject key identifier: 4A:3C:35:A9:76:8E:74:C6:72:1D:07:40:E6:AA:5B:82:8C:DE:CE:62
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 01977CB0C4404BBB473791D059E15A8C8940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0F08
Signing time: Tue 17 Jun 2025 07:00:48 +0000
Manifest this update: Tue 17 Jun 2025 07:00:48 +0000
Manifest next update: Wed 18 Jun 2025 07:00:48 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: INp7Jd4uWmOR/k19smyNp511c98VgDJ3h6nUtcH/els=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:c4:40:4b:bb:47:37:91:d0:59:e1:5a:8c:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jun 17 07:00:48 2025 GMT
Not After : Jun 18 07:00:48 2025 GMT
Subject: CN=4a3c35a9768e74c6721d0740e6aa5b828cdece62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:68:fd:46:27:f5:85:ab:8e:4f:fe:bf:66:
b2:66:f9:a4:69:c7:f5:8a:c3:59:f0:6c:d3:4a:c5:
2f:3d:5e:24:d8:1b:08:dd:7b:95:a6:99:49:b2:bf:
e2:c9:4c:2f:e7:e3:ff:70:3e:18:77:83:23:dd:b5:
3d:38:f8:5b:89:91:63:44:70:f4:6e:66:c8:aa:39:
29:bf:21:67:2a:2b:e0:4f:e7:bd:f4:47:83:6c:00:
4b:bc:9c:39:79:a5:b6:ba:93:4e:fe:37:42:45:2b:
72:e3:18:a7:e2:fc:68:d5:88:8c:f8:2a:fe:f2:c3:
3e:3f:d4:8f:e4:94:79:c3:36:97:24:a9:60:72:c7:
89:08:d8:97:09:e1:a2:62:35:c7:4e:f0:22:c9:9f:
5a:97:06:b9:67:02:a4:ad:47:25:ad:d8:eb:69:4f:
fc:72:41:3a:95:09:c2:0e:6e:36:d8:d6:98:cb:09:
e3:32:a5:d7:4f:8d:2f:36:46:7e:1e:bb:6c:31:39:
43:07:57:51:68:0f:e7:dc:57:a8:2b:5f:4a:99:0f:
73:93:ec:69:20:5e:29:d2:90:dd:aa:58:5e:5b:dd:
e0:30:ce:ce:ad:8b:cf:f0:a2:a6:fe:3b:98:3f:34:
25:d1:2e:c9:38:3a:3d:ee:c6:82:91:7d:35:d2:4c:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:35:A9:76:8E:74:C6:72:1D:07:40:E6:AA:5B:82:8C:DE:CE:62
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:56:41:a7:c0:77:0b:62:7e:93:2b:86:af:12:38:47:81:
0a:4d:a0:64:e8:58:96:f3:7d:e1:f9:e8:72:ee:10:1c:a4:49:
7d:81:0c:21:9b:43:72:8f:d9:33:25:77:37:eb:f3:3d:ea:03:
48:c1:a0:9c:ca:2d:8b:72:3e:af:4d:79:fe:fc:7c:ec:1d:47:
2c:54:66:5b:3e:9b:6b:8b:21:b8:4f:4d:3b:0a:c8:41:ee:9e:
8e:4d:a4:1b:89:d7:da:68:b8:0a:c7:7c:45:29:af:ee:22:bb:
7a:6e:f2:b7:b0:4f:4d:06:22:9a:21:2a:27:17:b7:10:bb:aa:
60:b1:a1:96:a6:a5:e5:d0:61:fa:e5:19:9d:55:68:98:42:46:
df:4d:40:5a:60:99:b9:10:e0:ed:ee:a5:00:bf:fa:2b:8d:d4:
a6:2a:7f:6e:5d:23:db:ce:41:e3:2a:35:f5:e4:5d:56:61:a9:
47:82:d4:cc:34:06:88:46:93:fc:3f:ea:38:ae:f6:ee:6b:00:
c3:4c:4d:8d:3b:c1:25:4c:f2:ee:38:66:08:83:dd:b4:b7:19:
45:c2:d9:dd:65:32:cd:69:b0:24:39:09:91:a6:38:8b:ca:09:
11:65:d3:d7:ad:08:ce:dc:61:44:51:8b:a9:33:9e:0e:31:28:
ed:85:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:43:29 2025 by rpki-client