Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: oCwGslTZcqfFkAVsvwOCtK6BuboelkvaOTEhpHq1D5A=
Subject key identifier: 2F:AB:14:E3:EA:F9:74:8C:B7:ED:65:5D:EB:73:87:D5:C9:87:DC:B6
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019768F2AE1F7D4856DDA74E026F4EE4192F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 04A4
Signing time: Fri 13 Jun 2025 11:00:24 +0000
Manifest this update: Fri 13 Jun 2025 11:00:24 +0000
Manifest next update: Sat 14 Jun 2025 11:00:24 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: UKnbDloSHqvuafpz202/RJqwwgVtRCSwTImuYooDtDc=)
2: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (hash: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ae:1f:7d:48:56:dd:a7:4e:02:6f:4e:e4:19:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jun 13 11:00:24 2025 GMT
Not After : Jun 14 11:00:24 2025 GMT
Subject: CN=2fab14e3eaf9748cb7ed655deb7387d5c987dcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:6e:bc:5b:59:23:f4:5b:c5:83:5b:e3:a1:
2d:5c:fb:3e:c1:a3:cd:cc:ce:66:e9:50:92:fe:1a:
34:1c:c0:77:f4:a0:5c:2a:cf:95:e5:eb:35:00:24:
e8:41:6c:fe:58:5b:26:10:62:bf:1f:ce:01:d0:a4:
8a:27:4d:e0:c0:88:07:c0:6d:ba:cb:18:b3:cd:ad:
30:0a:92:3a:6e:9d:ec:91:b2:19:f7:d7:db:b1:41:
03:57:28:ab:f0:2d:39:b2:57:f4:f6:62:91:c5:35:
ad:3a:ba:3e:f8:23:de:79:92:6b:c3:75:4e:8c:c7:
00:81:98:83:84:01:14:64:49:0a:ea:bc:49:22:7b:
b8:4f:02:ca:ad:06:c5:4f:f7:42:38:d6:28:3b:40:
4b:07:17:61:a9:0d:24:7f:17:76:26:a7:4b:a6:88:
29:db:4a:34:86:a1:f9:67:1e:87:96:47:25:8f:b4:
9d:cb:6e:ba:6d:1c:69:e2:d0:9b:ea:15:12:af:56:
6e:7a:1c:c8:72:a1:64:1f:57:9f:b2:0d:61:38:62:
c3:46:49:2a:6c:ab:09:64:94:3b:b5:60:9e:af:79:
2d:be:c1:95:9d:8b:85:9d:7a:1c:56:0d:6e:18:8c:
c6:c3:87:d8:98:fa:a7:9e:62:b9:d8:f3:20:66:45:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AB:14:E3:EA:F9:74:8C:B7:ED:65:5D:EB:73:87:D5:C9:87:DC:B6
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:53:a2:32:fe:cb:8d:fa:6d:50:18:2f:c1:7f:05:2a:c2:
c2:ab:0b:8b:c6:67:29:c5:ad:27:dc:7c:bc:4a:8b:dd:39:d4:
e2:0b:52:2c:23:4d:e4:ad:56:0e:b3:6d:76:d4:3e:b3:9d:bb:
b3:8f:60:4a:a5:1c:6f:45:f1:b0:ba:bd:ea:0d:26:a1:75:73:
d1:eb:70:cd:9f:6b:77:43:e0:e6:3c:30:4a:7d:cb:d7:b9:b5:
e3:a8:77:33:4c:83:e9:0d:76:88:24:13:c6:77:e8:5c:23:42:
11:e5:8b:1b:1f:1e:45:0c:8e:6e:f9:b1:4e:1c:41:64:ed:dd:
5f:af:f6:48:de:aa:f0:cd:e8:6e:32:b7:77:1c:ae:02:d2:42:
99:42:04:74:8c:5a:69:81:01:e7:83:56:5a:71:a7:58:45:f9:
d2:8b:ce:e0:04:0a:02:05:be:0c:d3:04:56:40:c3:46:87:a1:
df:dd:96:a5:a4:91:a1:29:e4:13:38:8e:04:74:55:96:33:5a:
c7:2e:1e:29:27:8d:87:c4:14:41:ce:27:dc:6e:23:37:80:97:
cc:c5:40:25:b3:4b:5a:6e:28:a4:f3:ba:a1:23:ce:e9:38:f2:
29:14:d7:9f:bb:ba:7d:a9:d8:fb:c0:84:c5:f2:f3:66:a5:a3:
ff:7c:98:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:24 2025 by rpki-client