Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: j0cWgz6OTicWS3gFSp22QcUqG0eLlEAaclimzJekEEs=
Subject key identifier: 84:30:DA:BB:E9:44:61:47:E5:C6:69:C5:33:33:B1:AA:D3:20:CE:7A
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0197692A1D162D729027233F9C641B02C21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0CC7
Signing time: Fri 13 Jun 2025 12:00:56 +0000
Manifest this update: Fri 13 Jun 2025 12:00:56 +0000
Manifest next update: Sat 14 Jun 2025 12:00:56 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: l+ywAVpY681vZWIAbBzDPh1gboiV1sv03KRbobZt9T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:1d:16:2d:72:90:27:23:3f:9c:64:1b:02:c2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Jun 13 12:00:56 2025 GMT
Not After : Jun 14 12:00:56 2025 GMT
Subject: CN=8430dabbe9446147e5c669c53333b1aad320ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:0f:bf:4c:81:7c:e0:8e:f3:d4:6e:32:57:
8f:d8:fb:65:df:5a:7d:25:b7:77:a1:fb:52:26:88:
bc:6a:f4:31:a4:2a:ab:62:f8:6a:1e:e0:fa:13:a0:
aa:18:0a:16:39:be:5c:22:44:a4:a5:33:14:66:0d:
b3:6a:5f:a9:d6:2d:94:d6:cc:77:a8:81:2f:ed:25:
14:dd:4f:b2:5c:67:9d:89:89:3d:65:62:e6:0c:d9:
fb:81:2f:d5:d3:38:ce:79:27:de:52:81:62:98:e4:
2c:24:03:5c:a6:72:18:91:7b:40:c0:ba:20:5a:07:
8b:11:94:06:86:0c:f0:9d:d3:89:cd:c5:41:b7:7e:
c8:90:68:aa:40:e4:89:cc:d4:c8:03:90:ac:ae:cd:
91:c9:fa:60:0e:72:50:41:b1:94:01:7b:62:a4:40:
fb:6a:a2:7c:11:58:34:07:6a:96:27:6d:63:d7:8d:
89:ae:ba:83:df:53:9a:bf:be:13:f1:32:2e:6f:e0:
8d:f3:23:96:b8:20:4a:db:b0:70:3b:9c:2e:01:06:
c8:89:6d:68:be:d0:78:6c:f8:84:c4:86:3a:f0:1c:
00:53:b2:85:21:f2:37:23:b2:d8:37:2e:81:7c:bb:
1c:2a:26:a3:60:23:b2:93:da:26:40:d2:75:55:7a:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:DA:BB:E9:44:61:47:E5:C6:69:C5:33:33:B1:AA:D3:20:CE:7A
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ef:bc:ff:2a:84:54:18:8b:61:c4:ad:61:0b:6e:1a:25:a9:
28:66:ce:e6:e2:4d:8d:bb:ad:71:54:ae:cf:ec:2e:58:8d:ef:
2c:3c:20:28:8a:99:ef:83:08:ed:fb:8f:99:bc:80:26:f7:35:
dd:21:0f:e3:37:f3:a7:3a:d4:0b:70:9a:86:f8:3b:6b:22:76:
ab:b3:4b:d9:68:19:c9:2f:df:6a:df:de:c1:bf:62:2a:02:e4:
eb:aa:0c:b6:66:11:16:b9:1c:da:cb:ee:6f:5e:29:15:65:7a:
96:76:c1:3d:4c:bb:fb:85:75:d8:f8:85:2e:10:11:78:d4:8f:
e4:46:9e:32:41:ee:58:72:d4:21:3a:b7:63:6c:76:10:48:6a:
5c:17:89:f6:b5:e4:ba:72:48:78:16:ff:a5:99:49:1b:f3:43:
e7:c9:60:63:a3:ea:14:02:82:c3:1a:08:c0:6e:84:45:26:eb:
88:8a:c9:41:b0:f0:bf:4f:94:f9:f0:12:1e:48:e8:49:13:50:
44:59:26:a3:cc:6e:05:b6:2e:e4:8f:94:71:2c:38:cf:d1:10:
52:a3:ef:bc:71:7b:37:1e:cf:4f:13:c4:30:24:f7:88:3b:bc:
d5:6b:ad:6c:eb:52:8e:73:e2:43:84:43:1d:e7:75:80:09:4a:
cb:6c:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:18 2025 by rpki-client