
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: K/hMu/k755jtVe7Gafrt8brm+w5rTn4YkehHXlraaaE=
Subject key identifier: 9F:AD:7E:60:C9:3D:15:DD:51:A0:30:D2:79:8F:D0:02:F3:3B:C7:14
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 01976D06E8CBFD262B7179E0CA4D64F996D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 06:00:58 +0000
Manifest this update: Sat 14 Jun 2025 06:00:58 +0000
Manifest next update: Sun 15 Jun 2025 06:00:58 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: XhvsfUq6blG0J0MeDR0+pQ1datKCjMvC3bm4exs8dhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e8:cb:fd:26:2b:71:79:e0:ca:4d:64:f9:96:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: Jun 14 06:00:58 2025 GMT
Not After : Jun 15 06:00:58 2025 GMT
Subject: CN=9fad7e60c93d15dd51a030d2798fd002f33bc714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:9c:20:78:74:10:06:35:c5:33:76:a6:e3:
73:38:d0:f7:8c:77:d3:f7:d1:60:9d:ed:56:34:52:
21:c0:ef:3c:d5:e8:22:17:c6:a8:7c:e5:a8:5a:54:
15:90:46:3a:57:4a:e9:3d:f2:a0:24:8c:87:58:2d:
a7:f4:69:55:18:b3:8f:dc:d5:d9:85:fc:dc:42:06:
c3:11:c0:9d:5a:b6:62:e4:b0:69:92:cb:21:81:52:
c1:59:1a:ca:2f:f2:62:d7:4b:51:52:43:88:f1:6a:
61:e5:5d:0a:82:ae:1c:16:de:9c:99:2b:0b:fa:68:
bf:22:2c:06:5c:06:6f:77:31:ac:08:12:2a:2d:3f:
6d:64:08:9e:08:3f:45:e6:d8:d3:51:11:34:0b:df:
22:4c:e2:9f:3e:b5:cf:69:7a:d7:5d:90:f0:94:73:
f8:8a:33:70:2c:f3:01:91:bb:cb:30:0c:86:a4:b9:
32:4f:18:a7:4d:fb:82:94:15:0c:67:12:51:56:42:
1d:ec:c1:5a:21:45:c5:7c:40:77:9f:ed:00:05:e5:
3f:cc:40:88:4e:44:f1:16:9b:37:9c:91:1c:12:33:
05:1d:a3:89:7b:7d:79:8f:28:79:4c:17:1b:f7:7f:
a2:2f:df:d5:f2:c1:70:ed:70:68:ff:28:38:08:af:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:7E:60:C9:3D:15:DD:51:A0:30:D2:79:8F:D0:02:F3:3B:C7:14
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:80:92:ea:6b:a5:53:f9:cf:8b:1a:3d:03:7c:51:22:e4:11:
22:2b:bd:7a:b5:23:bb:95:a4:e8:b6:92:a2:4d:2d:27:b9:49:
ec:19:66:50:7d:d9:b6:33:54:0e:39:a2:6c:b3:b2:0a:9e:a5:
fb:3b:2d:6b:88:f3:16:8c:b3:88:db:c2:b9:ed:f1:58:87:9d:
7c:73:79:0e:c2:d8:f1:08:29:5e:22:5d:a8:6d:2f:00:a3:07:
e1:fd:20:16:04:40:98:a3:b2:f1:fd:16:8e:c9:17:87:62:85:
d7:e8:e0:5c:f6:6f:08:ad:8f:7b:af:7a:05:13:6b:6f:1d:1c:
73:cf:be:20:5b:65:d8:0d:58:49:31:57:dd:af:cd:45:0c:38:
ff:69:45:ea:d7:bc:b4:79:af:3d:1d:c3:d2:0d:ff:36:7d:a2:
78:cd:8d:02:a8:38:c6:91:dd:a2:43:16:f6:f6:a8:a5:28:33:
bb:9d:40:be:23:0c:a9:ae:36:94:f9:e7:96:42:18:3f:99:fc:
1c:0e:80:7f:7c:65:ee:e5:7d:ed:a3:fd:12:57:1f:7a:bf:97:
0b:d7:7c:d6:f6:b7:08:68:ae:8b:91:99:94:e9:b4:84:9b:99:
46:00:eb:c1:aa:34:6b:67:13:67:0c:56:e2:22:fa:24:26:20:
b0:ba:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:43 2025 by rpki-client