Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: 6taKVkv+8ApA+IlEqCHjAsyzue07OqU7c53GIzhQQhU=
Subject key identifier: EA:34:A6:FA:B4:D9:3D:7A:6E:91:BD:32:7D:15:FA:F2:9E:9B:4A:F0
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 01976C98D5F9AE2E3B9C39E12F38449AEF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 0393
Signing time: Sat 14 Jun 2025 04:00:44 +0000
Manifest this update: Sat 14 Jun 2025 04:00:44 +0000
Manifest next update: Sun 15 Jun 2025 04:00:44 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: BMKUf0uWSA59cvhh+3o1TdTXYD6Rkgb34o6q4cY6EWs=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d5:f9:ae:2e:3b:9c:39:e1:2f:38:44:9a:ef:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Jun 14 04:00:44 2025 GMT
Not After : Jun 15 04:00:44 2025 GMT
Subject: CN=ea34a6fab4d93d7a6e91bd327d15faf29e9b4af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:00:3c:72:b9:bc:2b:8d:23:10:8e:2d:ab:
2b:44:56:48:81:4c:61:cf:66:35:55:16:ec:1f:1a:
e6:5d:87:2d:cd:1d:d2:1e:6d:b2:4f:1f:1e:99:d1:
55:7b:6d:f1:34:9c:7c:df:47:f9:16:fe:f0:5f:f0:
0f:6a:51:80:7f:08:b5:d0:10:51:ba:cc:96:1a:42:
4e:bf:36:c0:61:d2:ce:9d:77:14:47:6d:6e:52:32:
06:4b:36:d0:c2:ca:1f:3a:d4:a9:79:ce:5a:33:95:
26:16:fb:d0:f7:c9:47:4e:8c:52:fc:b6:d2:b3:04:
b4:79:71:de:68:5f:cc:66:de:83:e7:3f:01:2a:d1:
15:7f:ae:e1:cc:dc:cb:36:60:56:8a:4e:b1:e0:11:
b7:23:80:6e:84:79:5a:f7:2c:04:42:fc:9d:b7:05:
40:9e:34:a0:1d:85:72:a7:af:0a:0d:14:91:2a:5b:
7c:f1:8d:80:90:31:9c:2f:e8:1f:ef:8f:ad:aa:45:
d5:51:c6:b9:e6:d1:cc:4d:1c:45:6d:27:f5:56:bb:
09:fe:6e:e6:f9:13:c0:e9:33:84:0e:fc:c7:df:f3:
87:ba:a6:81:7e:af:38:fe:5e:f9:2c:b2:24:cf:ab:
30:8e:42:de:17:f8:42:22:06:13:5f:05:35:92:32:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:A6:FA:B4:D9:3D:7A:6E:91:BD:32:7D:15:FA:F2:9E:9B:4A:F0
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:21:de:46:ec:59:35:38:e8:b5:65:ad:78:5a:24:c0:5a:
f8:f1:17:cb:e0:f4:f9:35:89:58:b5:65:51:8f:15:aa:d5:79:
d8:43:59:00:d4:e4:2a:1b:b3:d2:ea:1e:f1:1a:85:96:45:6c:
e5:3d:3f:b5:f9:5d:01:99:c9:45:64:a1:d4:c4:10:57:60:53:
bd:a9:e9:fc:7a:d7:79:cf:54:9c:e7:61:bb:f3:ab:da:cf:a3:
e4:e8:5f:c5:c6:ad:c8:a9:31:ae:c9:ab:a8:d1:bd:78:68:40:
2b:97:9d:56:89:71:e5:bc:f2:5c:fe:22:68:3f:27:c5:11:db:
9c:54:69:24:41:28:4a:e3:b0:70:15:e3:db:20:44:81:1a:30:
7a:e1:61:0e:4a:7d:3c:4f:21:41:2c:97:1e:3c:63:22:a0:9e:
95:0c:97:a3:fe:1f:12:47:a6:1b:d3:9b:fa:00:05:f3:51:45:
02:54:86:87:d0:b8:95:28:bc:14:e5:48:e1:42:ec:b6:80:d0:
14:91:58:4a:3f:40:41:1b:80:47:84:97:c9:9b:b0:98:64:80:
0a:b4:b5:0e:67:77:f8:22:34:0e:a2:fe:63:3a:d2:f6:88:e1:
cb:bf:00:54:fa:2c:f7:c5:af:45:be:77:96:22:73:d1:b2:44:
df:b2:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:44 2025 by rpki-client