Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
File: SO3JpU4ccjtWqu330BVAxbNr2rY.mft (raw, json)
Hash identifier: 3wOo/gaIzZOyN2m+qyRpcqzuLn+tgsgDVZQDyuu06pg=
Subject key identifier: 97:7B:0E:15:69:3E:BE:1A:D6:77:2C:26:0B:73:42:B6:6E:22:0B:C8
Authority key identifier: 48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
Certificate issuer: /CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Certificate serial: 0198D516272BDF76071705E05D0932549B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
Manifest number: 3D
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: SO3JpU4ccjtWqu330BVAxbNr2rY.crl (hash: ni94RLiukDE/gWb28xHXolcSCB4R9FgSrlwXTD2XSRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:27:2b:df:76:07:17:05:e0:5d:09:32:54:9b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48edc9a54e1c723b56aaedf7d01540c5b36bdab6
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=977b0e15693ebe1ad6772c260b7342b66e220bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:da:c1:9c:c2:eb:c3:45:27:99:f3:f3:c1:
a4:d4:e3:10:fe:07:c5:65:53:97:35:9d:b1:24:87:
5d:fb:d2:6a:be:27:43:e4:ba:46:13:1b:ad:9d:87:
e8:8c:cb:8f:5e:0d:9c:2a:6b:f5:2c:d8:f7:29:63:
57:76:0c:47:b4:0e:88:cd:9b:f2:ea:11:5f:9c:f5:
b2:89:54:77:4d:66:15:30:30:99:f4:1b:55:8a:35:
2e:31:10:a8:cf:ac:d0:f7:14:fb:79:de:73:67:a0:
c3:8a:34:9b:a6:88:59:55:31:a3:f5:9f:c1:52:38:
0d:32:11:55:04:9a:36:0e:97:21:89:d7:6d:ef:f3:
87:94:8c:d9:0b:15:ca:dc:27:75:05:58:43:4c:8f:
be:ce:a1:1e:9f:9c:e5:d2:be:a3:8f:be:47:25:84:
cf:b5:cb:c7:84:72:c1:b0:78:68:85:4c:25:ee:36:
4f:5a:b9:79:79:1b:c7:0c:02:9d:52:48:2f:e5:9a:
4a:cc:08:2d:2f:1c:47:97:4f:b2:bb:2d:02:64:67:
9a:aa:8e:03:35:96:3f:dd:dd:6a:dc:a6:9a:53:65:
6f:46:b1:8e:a9:13:7b:47:17:4a:05:83:f2:6d:b1:
66:98:a0:14:a2:d0:ba:d7:46:28:7e:d0:8b:03:11:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:0E:15:69:3E:BE:1A:D6:77:2C:26:0B:73:42:B6:6E:22:0B:C8
X509v3 Authority Key Identifier:
keyid:48:ED:C9:A5:4E:1C:72:3B:56:AA:ED:F7:D0:15:40:C5:B3:6B:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SO3JpU4ccjtWqu330BVAxbNr2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/780ef6-53d8-4754-a8e3-c2a6ae0bf6be/1/SO3JpU4ccjtWqu330BVAxbNr2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:03:a5:4e:2a:14:74:a0:47:95:b9:b0:05:30:87:ab:2a:db:
15:a2:8e:61:78:7e:46:42:0a:cd:69:8b:48:9b:53:5d:04:1d:
e5:d7:e1:b0:71:cf:51:a1:53:d7:82:3c:3f:01:44:0b:ec:5d:
34:d0:32:6e:ec:91:19:4b:5e:ee:1e:69:6b:6e:7c:1c:49:d5:
70:cc:84:2f:c4:53:38:60:3f:2e:ce:c3:84:b7:18:c2:38:ce:
90:1d:09:f6:7e:df:28:f3:b9:6e:13:c5:09:fc:66:4b:2c:d2:
a8:a3:7a:75:40:33:f4:f2:6c:5a:c7:03:34:5e:57:09:2d:2f:
e4:c1:7a:21:46:04:21:16:df:c2:9f:8e:b9:62:9a:36:99:3b:
e1:30:68:6f:26:bd:40:0e:23:93:9d:9a:22:af:d7:3f:dc:56:
c6:78:a7:ad:09:f8:bb:34:a4:8b:ce:e7:a2:ad:07:a4:52:fb:
a4:ca:f0:1c:cf:7b:c1:07:00:69:fe:27:ab:84:a3:9d:27:cf:
96:05:2a:e1:b7:4d:32:7b:18:73:48:ea:9f:d8:f3:6f:23:8e:
23:62:e0:a3:dd:b6:8f:c1:50:4a:02:36:21:b2:ee:9d:6b:67:
c8:f4:9e:05:f1:80:b5:9c:31:c5:a3:5d:69:74:cf:1e:56:ed:
ec:0e:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:39 2025 by rpki-client