Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: 7wnxdbaBuhrYWlk0uH0/PSjNJNGh/0x32/Cd86GCit4=
Subject key identifier: 5D:67:C8:52:19:37:FE:52:18:2F:04:EC:0A:0A:B1:25:CD:D0:D4:9C
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019774BFD73DBF3EA14BF73D26A90B216A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 18:00:18 +0000
Manifest this update: Sun 15 Jun 2025 18:00:18 +0000
Manifest next update: Mon 16 Jun 2025 18:00:18 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: rtfZ++u13lx/YbvxMP/x7Peu4WkhAVj/ljWrM8zNEjI=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:bf:d7:3d:bf:3e:a1:4b:f7:3d:26:a9:0b:21:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Jun 15 18:00:18 2025 GMT
Not After : Jun 16 18:00:18 2025 GMT
Subject: CN=5d67c8521937fe52182f04ec0a0ab125cdd0d49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:7e:37:23:b2:49:a1:6b:21:6f:5f:2f:2c:
de:81:50:71:96:bc:76:e5:2c:be:9a:e8:4e:a3:c7:
65:67:25:6e:9e:1d:9a:64:e2:0c:90:5d:c3:f1:c3:
ae:ac:6c:39:93:df:9d:72:dd:28:23:6a:c2:d8:14:
e1:83:13:23:81:1c:af:08:89:3b:6c:55:44:8a:b8:
fc:18:d2:c4:81:70:6e:3b:f6:99:b5:91:62:2d:ea:
01:03:99:0d:b8:16:d4:aa:bd:6a:98:11:ab:7a:1e:
7b:60:9e:70:a3:35:1f:a1:c3:00:8f:fb:22:ab:d6:
c1:47:a1:4a:c7:1c:15:ad:ce:9d:44:08:7c:8f:e3:
15:77:aa:bb:42:82:6a:b3:aa:7c:49:df:c1:08:dc:
d7:b0:8a:19:9c:79:70:14:f7:98:38:02:12:17:61:
3f:bd:33:17:32:28:25:cf:78:6e:04:51:f7:58:67:
17:00:b9:1c:a8:d6:d0:85:a7:fc:6d:9f:35:ec:19:
74:f0:a1:7f:fd:aa:99:37:6f:c3:d5:b4:ec:bc:dd:
0d:80:13:c9:14:74:93:14:07:4f:1e:22:d3:2b:19:
01:6a:8c:6b:33:c5:16:bc:70:a4:33:0a:39:6e:ec:
66:35:75:f2:01:8c:8c:f2:e6:9f:14:f2:e4:85:4e:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:C8:52:19:37:FE:52:18:2F:04:EC:0A:0A:B1:25:CD:D0:D4:9C
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7c:bf:ef:ea:90:bf:39:66:f3:88:da:43:76:07:ab:97:1b:
dd:6d:6a:b1:a9:26:ba:9f:6a:64:a6:95:cb:f0:7b:30:e6:31:
e1:65:77:30:df:de:4d:4d:61:b5:c2:0c:a5:00:aa:a6:d7:ce:
24:1f:62:0a:02:f2:9e:c4:5d:5e:24:02:8c:79:41:69:ad:ce:
e0:53:ef:45:6f:2d:61:56:5a:a2:92:19:2f:55:80:60:71:8a:
99:71:2d:d7:65:14:2a:69:e7:83:89:44:e5:58:07:5e:d8:06:
fb:37:a8:c8:5b:4c:d1:76:7b:b6:bc:10:49:3f:e6:e5:cb:7f:
df:04:a9:df:1e:eb:5d:49:53:7f:9f:3f:c3:00:76:79:e8:64:
7a:28:78:15:ec:b1:c7:bb:a1:06:7c:ea:eb:eb:11:cd:92:4c:
7d:44:92:5c:bf:4d:5e:d7:05:0d:2d:9b:5c:7a:41:37:84:bd:
55:56:4e:0d:a3:7f:f6:ee:4e:54:8b:c5:1f:f2:97:12:df:77:
b6:21:3f:2a:31:d3:2d:76:a9:0e:1f:af:a4:9e:80:c7:36:d3:
92:4a:76:29:0e:ca:93:b8:b3:aa:89:c4:35:b7:78:47:23:07:
16:e3:e7:db:7a:55:cf:e0:d5:93:86:79:2e:a9:9c:b7:93:6f:
5f:45:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:27:01 2025 by rpki-client