Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: /Of9yA2+oKRVbfWmXpgbvSZVJf/i2lxvGSOXmvW5TGg=
Subject key identifier: 0D:0E:0A:F6:2E:75:86:5C:F5:63:B5:CB:E8:B8:EB:20:45:74:9E:DE
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 01977C79B2D2852F88430BA56652FC58A420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 0EF4
Signing time: Tue 17 Jun 2025 06:00:39 +0000
Manifest this update: Tue 17 Jun 2025 06:00:39 +0000
Manifest next update: Wed 18 Jun 2025 06:00:39 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: Q0jfSRk7qWvCIzyqvz0so0fZNDJLFFiwFRIyeQoBNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:b2:d2:85:2f:88:43:0b:a5:66:52:fc:58:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Jun 17 06:00:39 2025 GMT
Not After : Jun 18 06:00:39 2025 GMT
Subject: CN=0d0e0af62e75865cf563b5cbe8b8eb2045749ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:a6:53:7e:d7:65:fe:b1:d3:f7:81:44:f5:
cd:31:56:f9:f6:94:11:0c:96:6f:76:3c:ee:be:e6:
50:f0:7f:83:db:1e:13:96:cc:fa:e7:af:1c:4c:8a:
44:44:38:06:80:a0:16:e6:44:de:fc:b8:ed:bb:df:
18:0b:37:82:01:7b:77:48:0d:64:c3:be:93:ca:53:
fe:f8:9d:c3:b9:4e:95:c2:59:34:9d:ce:13:27:ee:
10:68:21:3f:97:9f:ae:e7:e8:a1:6c:bf:12:97:c6:
ab:4c:d3:41:9d:ff:44:d5:68:93:54:67:75:df:3a:
ad:d2:4c:c1:9c:b2:e2:b6:09:49:d7:e2:f7:a4:3c:
87:b3:eb:28:91:80:5d:6d:15:4c:5a:00:79:22:44:
08:04:d5:34:0e:68:5c:bf:ef:a4:76:f7:a1:87:56:
e1:7b:d9:96:68:24:be:f6:98:ff:2b:76:cf:41:32:
e6:f0:25:c4:fd:00:c2:5f:88:30:20:c2:ad:76:1a:
28:68:06:02:61:01:a8:35:fe:5b:49:d5:16:a6:5d:
8c:cb:b4:f8:18:d1:6d:a6:84:7a:c5:27:9e:78:32:
67:2b:69:b8:ca:14:9e:6b:07:35:11:53:aa:ef:e7:
ec:54:10:39:41:d1:3f:d9:6d:11:25:7d:f3:53:b3:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:0A:F6:2E:75:86:5C:F5:63:B5:CB:E8:B8:EB:20:45:74:9E:DE
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:86:8c:64:5a:4b:a0:b1:83:b9:29:83:18:3c:b7:6d:25:42:
53:53:0c:5b:8a:42:d4:69:df:f9:79:82:a1:22:03:95:d9:a5:
2d:1e:6f:c2:1b:95:a7:25:6a:63:f5:55:86:0b:73:db:93:e2:
28:db:3f:2e:3e:e6:d2:6f:b4:74:21:01:fb:8d:aa:19:0a:fa:
19:5f:70:7c:6c:9c:73:c1:8d:d9:60:d5:85:6f:15:b9:c2:06:
05:07:f1:03:cc:9f:cf:72:d7:e8:96:38:70:42:9f:6b:92:1f:
4c:4c:03:d7:0e:28:87:dd:35:0a:96:e1:14:bc:62:06:b7:4b:
e0:63:19:bb:45:5a:e5:79:f8:c5:52:ff:5e:33:fd:45:fd:0d:
d3:6b:c5:d7:e0:16:83:1b:ab:6a:94:2b:76:e8:2b:df:2a:75:
e7:c9:65:93:c5:0a:c8:28:ec:54:ea:3f:df:a5:84:8a:46:60:
0a:4c:3a:c0:2d:60:bb:b0:74:92:ae:26:24:6a:da:99:00:35:
9d:7d:35:12:7c:21:b9:83:61:f8:4a:ba:3c:78:42:52:16:b6:
62:7b:bc:98:f0:55:fe:15:bf:fa:bc:72:b2:70:fc:fd:3f:39:
c4:e4:ed:86:05:e5:ba:bc:ba:63:6d:13:20:a9:9b:d1:e4:ff:
41:76:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:15:08 2025 by rpki-client