Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: /tixV45rip6PBsGBuMjTXU8UwdU6ZS/EZyOe2ANbWfA=
Subject key identifier: 30:75:BA:AA:3D:D3:CA:D8:CD:34:0E:3C:3C:6A:41:7B:63:77:DA:BE
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 019769619775E7C37E10103EF135E993DBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:01:32 +0000
Manifest this update: Fri 13 Jun 2025 13:01:32 +0000
Manifest next update: Sat 14 Jun 2025 13:01:32 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: ZkMnGeQ5KUlIPNZpKHb4QA012eSkoQFHnxqyxk2z1yg=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:97:75:e7:c3:7e:10:10:3e:f1:35:e9:93:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Jun 13 13:01:32 2025 GMT
Not After : Jun 14 13:01:32 2025 GMT
Subject: CN=3075baaa3dd3cad8cd340e3c3c6a417b6377dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:48:5a:45:d4:b9:39:dd:a7:fb:f6:33:0c:
6c:f5:9f:2b:a0:c4:1d:7a:80:98:18:3c:04:19:1e:
c7:eb:d6:51:9e:8e:10:25:d7:81:7a:a5:86:33:f2:
78:6d:6d:17:22:ec:74:e8:c1:de:84:f5:d6:a5:03:
bb:24:da:0e:d3:4e:e8:a1:fc:d9:7b:a8:f3:5e:98:
02:6c:4d:08:b5:4b:10:90:c7:3b:55:e7:64:9a:85:
da:5c:fb:89:01:f3:49:8b:fd:02:6d:e9:27:97:7a:
19:d4:9c:1e:60:91:4f:dd:c6:b7:96:c5:40:60:14:
f7:f1:80:6e:de:74:d5:e4:3d:55:c1:e3:02:25:9b:
14:e0:be:9c:6a:c3:97:45:f3:3e:72:97:57:3b:ee:
43:28:ec:58:29:43:7a:bd:4b:71:52:57:bd:d5:ca:
82:87:87:b1:62:2d:87:ac:e0:fe:29:38:26:02:ba:
57:87:9f:da:07:d6:cc:32:10:18:76:75:b9:13:13:
b0:03:74:b4:2b:c1:5e:55:8c:c4:ba:d7:c6:3a:09:
d3:56:c2:a4:41:5c:50:23:92:4f:e4:e2:29:10:50:
73:52:28:ab:4e:d3:59:ea:8c:43:6c:d4:f6:88:02:
28:5d:74:c8:5b:5d:b8:af:8a:41:08:4e:e0:61:1f:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:75:BA:AA:3D:D3:CA:D8:CD:34:0E:3C:3C:6A:41:7B:63:77:DA:BE
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:68:7a:58:ca:aa:59:7a:bf:1a:ac:20:54:f3:2d:86:c2:7e:
c3:53:ea:54:e0:01:79:a7:ae:ba:3d:76:78:bc:27:f5:e6:e9:
db:c3:cb:40:ca:e7:9b:a0:2b:39:dc:fe:f3:a7:94:e4:08:54:
0f:70:1e:09:30:24:9d:ba:00:e4:4e:75:e3:82:d7:2f:96:06:
6c:ab:48:42:82:9d:15:fd:c6:84:97:21:27:b7:73:f5:85:17:
82:f8:40:ae:a7:99:84:3d:28:ea:22:7b:35:62:50:37:42:85:
fa:cb:d9:e0:d5:56:01:d3:f8:bd:d6:4e:5a:27:4e:7b:92:3b:
3a:57:d9:5e:60:5b:59:bd:9e:b3:0f:99:87:7a:96:94:da:f5:
16:b6:9f:e9:0a:08:b7:9b:0e:46:40:33:86:15:0e:b2:55:52:
d7:bb:2b:06:da:35:92:94:69:fb:bc:9a:cf:2a:f3:6a:74:b9:
66:d8:8a:d5:ed:22:8a:31:4f:28:69:e3:6b:03:d2:9b:51:a4:
6d:49:e9:3a:c1:89:6f:1e:f1:5e:8b:4d:33:77:fd:d7:02:6c:
e2:b9:54:ce:d6:3f:a5:be:6b:24:6b:7d:80:71:47:e5:a3:73:
1f:cb:7c:f2:db:64:ce:57:27:d0:2f:2e:9d:0f:14:61:d0:3d:
2d:36:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:28 2025 by rpki-client