Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: SwBjVjlYzQn+zVP7hfKWqOHXGTnqMV8jpnKRwpYR1P0=
Subject key identifier: 58:46:6B:D4:F8:FB:C6:65:23:90:AA:D8:54:65:3C:3F:8E:81:71:9F
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 0198D54E494F82B9F39E0E3EF145E2E9E2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: Xiu1F2AZ4dNUVPl/u1kngTi4RFbaI4NghnCanO3CHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:49:4f:82:b9:f3:9e:0e:3e:f1:45:e2:e9:e2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=58466bd4f8fbc6652390aad854653c3f8e81719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:7e:2e:6a:55:58:5c:ca:a6:ea:09:9a:9c:
55:a6:23:80:78:35:7c:cf:7f:03:22:65:8e:27:0b:
e1:a1:31:74:76:8d:f7:22:6f:1b:49:d1:5f:ca:96:
bf:bb:b3:19:d4:19:0e:e4:ad:13:bd:46:3d:5c:10:
b5:cf:b6:1f:46:1f:04:1c:54:85:1d:87:4d:dd:17:
02:50:16:9b:ea:03:0c:05:df:bb:d2:56:80:c6:e6:
ba:79:27:d8:00:9b:68:98:24:05:8d:50:db:32:3f:
d2:9f:98:33:28:1c:8e:d1:e5:d2:f0:38:6f:e0:72:
b1:6d:c4:9c:84:39:e1:ca:a4:ae:fc:88:3d:ae:13:
84:5e:45:c2:29:fc:0c:2a:ba:01:c7:b9:1a:91:6d:
2a:d4:70:00:60:24:b4:bf:c4:ab:9d:eb:6a:ba:1a:
e3:78:ae:2d:eb:8f:e5:2a:42:31:45:8a:7b:6e:d3:
4c:87:07:e8:4e:5b:ab:61:4b:1f:5d:b3:51:5b:18:
5c:bd:11:77:df:ac:9a:3d:86:52:eb:15:5b:10:2b:
8d:8e:e2:36:5f:bf:a9:4a:81:d5:ec:1a:f0:04:2c:
63:d2:48:d2:f2:e8:ad:10:22:7f:ea:7b:9a:03:25:
7a:bf:72:a1:07:71:9a:11:a3:54:f4:6b:4d:c8:44:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:6B:D4:F8:FB:C6:65:23:90:AA:D8:54:65:3C:3F:8E:81:71:9F
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f1:3e:65:bb:4d:80:16:09:27:73:88:60:3d:ba:cc:f0:11:
07:d0:c4:00:1e:9b:71:8e:ba:85:af:65:bf:87:4e:12:4c:a7:
1a:a1:60:23:06:3b:ec:87:75:39:c8:62:f1:30:43:8a:0b:e0:
2c:ac:60:af:17:11:6c:35:d5:4f:19:6a:6a:a9:c4:bb:cd:b1:
b8:98:d5:2b:34:16:6a:68:95:ae:1a:0a:e3:ed:69:be:d9:6b:
88:23:58:87:79:0b:06:27:d2:73:a6:ae:5b:7a:2e:cf:96:7f:
11:cd:f4:97:d2:5e:a1:fd:2e:8d:0e:88:26:d8:66:c3:63:5b:
b0:03:3a:db:78:1a:c6:c8:18:e1:1b:ad:80:af:47:2b:6c:30:
dc:2c:5b:c5:37:19:68:a5:b9:ad:fe:10:00:10:f0:13:63:60:
93:c1:fa:b5:c7:69:d9:6b:b8:bd:06:25:4e:b5:02:68:ac:85:
9f:39:32:8c:1c:91:f3:b7:83:b4:36:d1:67:e2:cd:44:10:fc:
56:b5:ea:cb:7f:dc:7c:43:93:2e:2b:2e:13:bf:ec:8c:f6:7d:
11:ee:b9:9f:2f:74:ab:9c:52:28:b8:4a:d0:52:d2:f6:0a:9b:
ad:09:e6:ae:4c:7e:ce:7d:34:c3:10:23:49:77:50:e8:08:37:
c0:ec:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:12 2025 by rpki-client