Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: Q6D15Ow5h66sjxiwfY55Ru6WI6ITzK2mrP8F2KKJU10=
Subject key identifier: E3:A2:94:1B:E4:CE:41:D3:1D:51:5E:BA:09:A8:91:51:71:DA:8F:AF
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 01977D557BE6D1970FF503835DBA4DFD9CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 10:00:43 +0000
Manifest this update: Tue 17 Jun 2025 10:00:43 +0000
Manifest next update: Wed 18 Jun 2025 10:00:43 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: ySLzzXCI8iSuHf3vpgEuWaT+tk/cLd7Cx+s5qUV8AfE=)
2: OwG4_h94ip7CzANECDf39dfwNGk.roa (hash: XIXqYD1CZdADAiBPHja+pimegzmDxikS2efUTrBV4t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:55:7b:e6:d1:97:0f:f5:03:83:5d:ba:4d:fd:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Jun 17 10:00:43 2025 GMT
Not After : Jun 18 10:00:43 2025 GMT
Subject: CN=e3a2941be4ce41d31d515eba09a8915171da8faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:06:18:9f:af:bf:14:7a:27:34:73:57:fe:
40:44:d8:84:d1:75:42:3c:7a:28:e6:a7:45:68:eb:
30:c3:51:cf:e4:3e:63:94:56:ae:db:ce:6d:6f:c9:
49:7a:9a:ea:21:7a:0b:42:5b:79:c8:b8:65:b1:56:
27:a1:8e:23:cb:ee:b2:6e:46:07:bf:ca:0d:7b:f3:
57:4c:2f:e3:71:5c:5e:a4:7d:3d:55:b8:62:f1:bd:
dd:7b:b4:09:a8:64:c8:5a:df:76:9d:4d:c0:65:e4:
ea:a7:81:c0:da:a5:0d:ef:70:9f:17:89:53:29:c4:
40:db:6f:0e:71:bf:57:7d:46:a6:bd:6a:61:4d:f3:
9f:cc:14:ed:9a:bf:c3:01:fe:0a:05:bd:3d:27:de:
3a:bf:4c:74:ec:d5:3e:1d:2d:3c:6d:44:42:2f:89:
ae:54:7b:51:2a:9e:9a:c9:19:e2:60:96:b6:2f:e9:
c8:5f:d3:c0:a4:9f:d6:95:96:df:16:db:06:f7:2f:
16:d0:6a:6f:bc:29:ef:cc:e5:7d:34:58:d5:65:7f:
64:1d:3f:63:01:5a:52:fb:dc:15:29:eb:ab:92:8d:
15:b2:2c:a2:27:a5:0e:09:74:81:e5:88:c8:72:7b:
6a:69:3d:60:f1:dc:f4:f3:77:6d:2f:8a:67:4c:db:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A2:94:1B:E4:CE:41:D3:1D:51:5E:BA:09:A8:91:51:71:DA:8F:AF
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:79:34:dc:8c:3a:45:e6:20:41:86:38:9a:71:ce:1c:f7:
a9:06:42:ee:b8:a7:99:43:80:0a:d1:f7:cd:dc:45:ab:72:99:
d6:87:10:5d:0e:2f:56:0b:9a:5f:8f:00:fe:87:a4:5a:72:0e:
b9:49:3f:d0:1e:29:8f:62:42:f2:27:eb:91:ce:90:14:5b:68:
2d:52:45:9e:5d:1b:8b:2f:4b:b1:9f:59:2a:a8:94:aa:ee:e3:
94:4c:2c:33:eb:35:14:fb:14:aa:2d:b6:63:94:cb:2d:44:39:
31:1c:35:63:3b:0f:9c:05:57:88:15:00:31:5e:94:6c:f7:20:
4c:44:e0:fe:b6:76:92:51:33:f1:d7:d7:ac:36:ac:1f:49:95:
26:33:30:89:cc:81:69:71:27:0e:e8:03:13:36:54:36:bd:7e:
73:bb:fc:af:13:00:c2:5f:63:a3:9a:fd:90:d3:60:51:3d:5e:
12:2d:d2:56:72:78:e0:a2:94:f7:d4:45:d6:59:67:77:92:21:
ac:fc:0d:72:18:80:9b:28:7c:25:84:88:cf:6f:77:57:dd:8f:
6b:3c:b7:3f:68:56:8d:68:35:05:58:b1:13:d9:58:a9:e9:30:
b7:d0:73:11:8d:fb:78:88:99:33:d8:a3:2d:5c:fb:6e:12:17:
80:b9:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:35:55 2025 by rpki-client