
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: Crg5f7xccT4YeWO695PSA+Rw9rzAU5TsRTQGsJ8Rll0=
Subject key identifier: 18:5B:CE:59:EB:99:2A:72:BD:39:EB:34:3D:B1:D5:D9:35:53:61:C2
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 01976A05AE10DB295D0423E727CA8A0125BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 16:00:46 +0000
Manifest this update: Fri 13 Jun 2025 16:00:46 +0000
Manifest next update: Sat 14 Jun 2025 16:00:46 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: EDnjsGvebup867tQ+VcGo3frpYPjRrKSuQ16otlH/no=)
2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ae:10:db:29:5d:04:23:e7:27:ca:8a:01:25:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Jun 13 16:00:46 2025 GMT
Not After : Jun 14 16:00:46 2025 GMT
Subject: CN=185bce59eb992a72bd39eb343db1d5d9355361c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:63:33:d9:1a:b7:ea:39:ac:7d:36:e0:f8:
c8:b7:5e:0d:ef:19:f9:17:12:0a:02:ef:65:6f:cb:
36:87:6b:3b:74:d5:5a:5b:b7:e1:44:74:3f:f8:4c:
f1:c5:ba:aa:64:e6:0e:67:76:5c:9c:89:a2:e5:ec:
24:cb:82:63:83:19:af:35:5b:7d:d9:ce:ab:94:71:
69:bf:4c:93:d4:f9:9d:f4:51:d1:1b:49:69:29:61:
ad:08:b2:1c:b9:62:89:a1:f1:0f:c2:56:52:c6:83:
14:d0:a0:c8:fd:21:16:64:13:0a:e6:93:9f:88:ca:
e2:c4:2f:0f:83:e4:d9:5a:89:f4:28:f2:84:2b:91:
14:e5:46:d4:82:35:5a:7a:62:64:0d:3e:5d:4c:88:
28:80:b0:f3:6e:94:e9:5e:be:c9:70:be:84:4e:25:
d7:c5:d0:7f:43:c5:15:7b:60:78:89:be:f1:a4:5d:
07:8b:3d:7d:15:1b:66:ee:a7:43:c4:a4:3b:25:72:
89:3b:45:e7:df:75:5c:74:c8:d3:86:6f:9d:af:24:
47:0e:f8:b9:c5:23:4d:d2:b3:24:d5:fc:1e:c9:3c:
28:57:c2:8f:bc:96:66:29:21:8e:ef:4a:51:2d:80:
85:61:39:b7:85:87:3c:5d:24:90:03:56:0d:fb:da:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5B:CE:59:EB:99:2A:72:BD:39:EB:34:3D:B1:D5:D9:35:53:61:C2
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:8e:84:06:f7:73:2d:15:43:c7:e0:dc:c8:f4:c9:60:2d:
42:e5:bb:a2:ef:21:2d:22:a8:ef:e5:fb:42:4f:67:10:ad:c1:
8f:ef:25:5c:f7:58:c8:c9:bc:af:e2:9b:3b:4c:d7:73:17:4c:
dd:f6:8f:fe:c4:23:24:0b:7f:9f:3f:bc:50:b3:9e:ff:33:b7:
a6:7b:d6:e6:70:e8:f0:39:2c:6c:28:a4:5a:c5:61:48:23:45:
3a:58:c8:1d:6d:02:fc:59:c9:96:8b:c5:c7:8b:41:33:5b:bf:
6f:f9:b6:1d:12:cf:0e:de:d8:d3:b4:07:b8:47:9d:12:1d:10:
17:ed:74:a6:3c:29:cf:51:45:ab:f4:b9:a7:1a:7b:30:f1:6d:
48:5d:f2:ad:3d:16:ad:1c:32:41:5d:80:95:6f:3e:b0:2e:e7:
c6:ab:a6:f7:af:75:56:7b:94:12:c2:5f:bc:22:b7:ea:95:07:
d8:4e:bc:7a:a2:bd:66:cb:7d:ae:9a:9e:b1:14:75:62:f7:83:
4b:2e:ff:9f:0b:54:79:39:99:6a:ff:78:ca:ce:5d:7d:ad:8b:
17:f9:41:c0:db:b7:1d:3d:fc:0a:b5:ef:d1:67:09:d9:7c:8c:
42:24:35:4e:bb:15:1c:bc:94:90:b6:7b:ac:be:43:40:97:01:
f3:1a:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:50 2025 by rpki-client