Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: QgN3EJKPTG13FZju39YsFe6qlqN9e7+Oc9DXErS4mtc=
Subject key identifier: 24:24:5E:28:C0:7A:F5:31:10:73:2D:E4:D1:E3:45:90:1C:55:C4:A9
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 01976D3E89D96938DC0463882CD4680D79ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 07:01:44 +0000
Manifest this update: Sat 14 Jun 2025 07:01:44 +0000
Manifest next update: Sun 15 Jun 2025 07:01:44 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: pEaTUBbXiUYLdrmyRkb+FYdxEQc3zRy1RYF2hz/1m1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:89:d9:69:38:dc:04:63:88:2c:d4:68:0d:79:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Jun 14 07:01:44 2025 GMT
Not After : Jun 15 07:01:44 2025 GMT
Subject: CN=24245e28c07af53110732de4d1e345901c55c4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:3f:35:b4:a1:b8:b1:ed:c2:11:88:0c:e9:
6b:5a:2d:c7:03:dd:b2:72:ae:21:60:ff:90:ea:73:
e0:31:34:38:11:76:0f:dc:be:23:6a:3a:fc:3a:8e:
8d:1c:95:da:0b:d3:56:a1:18:bb:80:0f:a6:80:8c:
91:7c:ef:8b:b0:bd:98:81:ea:c8:c0:bd:55:0d:b1:
58:00:02:06:e5:7a:7f:cb:9b:72:01:73:92:cb:0a:
37:1b:e9:9f:d9:63:84:e3:52:f7:2e:c2:b7:64:72:
90:a7:42:cf:c8:d6:52:37:d6:f4:4c:47:2f:f6:7d:
d7:85:98:f8:92:7d:2c:b1:db:42:6b:48:6a:00:3d:
c3:22:5f:64:21:0f:90:b5:52:63:e5:53:38:63:d7:
5d:06:d1:83:4f:87:26:c6:d2:33:fa:10:8d:dc:6e:
1d:60:e7:98:66:81:b4:cb:0e:01:0f:47:e8:11:33:
bb:ef:8e:3d:7f:e3:ee:3c:11:8a:6f:55:24:2f:e0:
69:ab:7a:1e:f6:80:51:21:5a:41:ae:c7:ad:c0:b4:
28:1e:3a:e5:9f:74:10:f9:28:80:97:e8:f6:13:ba:
2c:b7:ab:ec:31:37:dd:79:c1:dd:c2:41:2c:24:70:
1e:a8:42:47:b2:dd:67:e2:5c:27:d5:4f:70:6e:3d:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:5E:28:C0:7A:F5:31:10:73:2D:E4:D1:E3:45:90:1C:55:C4:A9
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:01:70:a2:ac:1a:37:9c:10:a6:0d:34:a4:ff:b8:f2:b3:
2c:7c:0a:95:90:8c:89:22:3a:b0:9d:9c:b5:6a:69:92:56:79:
af:c0:4d:52:cd:9b:0f:b3:a8:dc:ae:cf:65:97:ca:00:26:d2:
29:9b:6d:90:8e:41:aa:63:87:ef:2c:61:0c:ae:99:2e:57:4c:
3d:23:2a:e7:f5:7e:3d:0d:5b:0a:82:d5:7f:54:2a:a2:b9:a8:
ef:c9:06:ff:80:51:d1:9c:53:18:24:e2:aa:dc:c1:b3:24:64:
9d:ea:f0:0a:b3:c6:d5:ef:ec:f9:e1:47:cd:d8:4a:41:69:4b:
a6:0c:ce:93:c0:4f:1a:da:bd:26:dd:a5:a5:e1:0e:87:02:88:
75:2f:75:df:cd:12:7c:02:4c:be:6e:4c:8b:c6:9d:12:e3:81:
fa:ca:44:ea:b0:74:56:7a:3b:32:c7:52:54:0d:07:f7:94:b7:
38:b5:ba:2e:67:7a:a9:23:ca:9a:a6:8e:83:60:ab:82:3c:0b:
d9:df:d0:0a:04:4b:0c:42:c4:43:43:5c:8e:e9:b5:c0:a3:73:
86:11:c7:b5:58:c8:f3:11:a2:aa:78:ef:5a:82:d0:3c:ae:99:
f1:70:ef:c4:9f:87:93:41:4d:72:be:51:89:b2:59:88:cd:e7:
55:33:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:50 2025 by rpki-client