Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: 3DvC4QREMT0BBE7wHDnWQL2tFNU8yvGSmKBL/6vz1aY=
Subject key identifier: 56:F4:98:16:EA:1E:E9:09:0F:A6:25:55:1B:BA:38:82:EC:D2:0A:13
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019771BF92195C31740B257F7F2B3E8C41E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1523
Signing time: Sun 15 Jun 2025 04:01:09 +0000
Manifest this update: Sun 15 Jun 2025 04:01:09 +0000
Manifest next update: Mon 16 Jun 2025 04:01:09 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: 6o4R88hETNfoUQSeioxjygEtaWxwV8rVzcXB8+hohsg=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:92:19:5c:31:74:0b:25:7f:7f:2b:3e:8c:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jun 15 04:01:09 2025 GMT
Not After : Jun 16 04:01:09 2025 GMT
Subject: CN=56f49816ea1ee9090fa625551bba3882ecd20a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:4c:2c:ad:54:b0:b5:06:f4:f4:e8:f4:e1:
2a:88:e6:d0:db:b0:6f:ea:76:51:8a:ed:85:ef:96:
8b:c2:a2:d9:a2:7c:36:25:ac:fb:02:43:6a:f1:72:
c4:86:17:bf:fc:cc:19:2f:84:88:7d:5b:d0:3d:2a:
99:73:ae:a0:b8:77:89:05:af:71:4c:de:4a:b4:2a:
25:0d:c0:29:b0:f3:b6:d9:68:ab:f6:32:90:1c:9d:
92:34:94:2c:ef:d6:ac:d1:9e:9f:11:36:24:4c:ca:
bd:52:e3:ef:95:fe:d5:1e:23:b8:d5:88:ad:d6:09:
22:f5:09:9a:ba:23:a2:f4:0e:ca:1a:42:87:24:60:
86:3c:19:af:4f:bc:bb:57:34:0e:a0:96:86:01:b5:
35:da:04:01:e2:56:40:f2:d4:82:df:28:60:97:9b:
d3:ae:8b:f9:fb:74:09:75:7a:90:3c:2a:e2:bf:91:
8a:62:9e:15:a8:8a:43:c9:02:12:6b:c8:70:c5:75:
31:f8:9b:01:d2:0e:6d:9c:40:e3:09:87:86:08:7b:
47:83:50:26:87:74:1a:2e:49:15:a3:e6:85:d8:e6:
5f:e3:0b:13:9a:e6:5d:1a:23:bb:16:48:98:8b:7d:
77:2e:29:10:ef:51:a1:76:0a:43:76:0a:fb:68:e2:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:98:16:EA:1E:E9:09:0F:A6:25:55:1B:BA:38:82:EC:D2:0A:13
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:32:47:46:e9:a0:90:86:3a:ee:08:f1:c0:9d:1a:35:6f:e8:
7b:23:0b:37:a8:ae:b5:d9:3d:76:a7:02:9d:c7:fc:1f:f4:b1:
e4:7a:c2:b6:1e:29:01:b5:aa:7b:53:8f:db:85:9a:37:6c:92:
82:ab:c3:bc:49:1f:29:34:cd:db:72:b4:fc:fb:b9:7d:50:67:
6d:f5:46:c4:f3:1e:26:33:c2:f8:e8:e0:8a:58:46:90:48:b3:
be:a1:d9:08:a8:55:ee:3b:15:85:87:a4:01:2e:01:c6:e8:0a:
7e:39:05:4e:1f:6b:d1:ef:9f:c5:31:ac:13:19:42:75:d9:4a:
73:85:24:c9:ae:97:93:b9:d1:cc:5f:50:0f:9f:18:bd:9a:a5:
16:68:84:a3:05:f5:2a:29:27:7e:cb:ce:40:04:75:1a:e6:08:
9a:be:34:ec:33:a9:dc:30:e8:a3:f9:c4:ef:8f:68:3e:9e:f0:
2b:ca:92:a8:6e:06:ed:a9:ab:eb:f8:5c:c4:bd:fe:23:85:73:
cd:57:4d:db:d8:cc:0f:3a:67:42:1b:b5:b8:47:83:bf:ab:a9:
19:68:ee:8d:cf:93:b9:2b:4f:2d:99:32:72:92:54:7c:e7:69:
ea:0f:60:1e:78:a7:5b:92:a7:87:35:6e:12:9f:02:c8:c1:74:
af:a7:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:14 2025 by rpki-client