Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: S6PhzNDMGoO1923/L5b4YTWGMNbJjhrHBmCp3Uer/d0=
Subject key identifier: E8:75:EF:85:E9:82:1F:00:10:83:73:E1:22:3C:E5:37:E5:38:A6:9E
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 0198D4E0301D1C1EC0406F38CF935F69F315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: 4+ZdYD2R8+ZBv3KU0lPV3nkXKpi9i/8v6b8sL6fg3aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:30:1d:1c:1e:c0:40:6f:38:cf:93:5f:69:f3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=e875ef85e9821f00108373e1223ce537e538a69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:01:3b:4b:30:98:4d:0f:34:e0:e1:c1:4e:
27:37:27:ec:fc:32:62:dd:42:dc:4c:5b:b9:b8:9c:
67:fd:38:f6:ef:49:b3:d3:99:fa:43:28:d4:b5:4c:
bc:99:cd:7b:d2:cf:ba:2f:8b:4f:2a:4c:31:34:5f:
1d:21:47:c8:52:f0:34:c3:a3:a9:64:43:af:64:46:
9d:69:d2:1e:81:a9:d5:35:e5:9b:e2:a9:09:04:81:
57:f1:27:4f:9d:26:3c:a2:93:d2:a7:8e:6d:68:bd:
c1:3d:05:f5:4c:92:21:d1:c0:d5:c2:31:e1:d9:dc:
f1:b0:5f:89:3b:d0:74:8b:bd:df:cc:84:fb:27:a0:
32:37:83:32:1d:b8:30:b8:62:3c:dd:08:0c:35:0d:
4f:3c:65:9c:33:d7:5c:f0:79:2c:5a:6a:00:16:69:
51:bb:0f:d2:5b:ca:39:be:af:c2:98:f5:8b:57:46:
c7:d6:9e:a1:10:f3:05:62:b9:b4:b0:3e:ed:53:d8:
76:85:01:3a:a4:fa:86:78:95:d0:89:b9:47:90:06:
6b:79:20:9f:1f:13:1a:f9:3c:ef:fa:0c:d1:85:e1:
51:0b:d3:74:52:fa:d3:dc:44:b6:4b:f3:16:87:f0:
2a:c7:b7:b7:2f:2e:bf:e3:c1:66:23:22:68:18:d1:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:75:EF:85:E9:82:1F:00:10:83:73:E1:22:3C:E5:37:E5:38:A6:9E
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:a8:c6:2c:7b:65:1b:a0:42:2f:d2:4b:ff:3f:57:d1:30:
fb:45:f2:a3:80:e2:ea:c7:5f:37:bc:53:07:dc:0a:36:13:1f:
6b:f9:93:a2:30:ad:a5:fc:60:8b:b0:3b:f0:df:89:17:8f:4f:
25:34:e7:db:d0:fc:a8:09:40:3b:9c:67:fd:d6:f4:43:5a:32:
4f:b5:36:f1:9c:7d:e5:64:2c:bc:7e:07:de:c6:5d:20:17:ed:
b3:c3:42:5a:6b:29:6f:4e:fe:1d:14:e1:db:bf:77:5b:c3:6d:
8b:e2:21:02:14:f4:1f:fb:72:72:fb:d8:f9:da:16:d8:ee:81:
d0:39:36:c5:8a:99:05:46:d6:0f:cf:fe:80:ae:a6:b5:3d:5e:
0c:8b:69:c0:81:41:6a:ab:68:39:4a:16:7d:05:c2:c8:c6:c7:
fd:c1:6b:46:1a:37:e1:0c:57:0e:20:7b:51:4d:4d:d6:fd:51:
3f:da:ef:77:55:a3:d0:76:d0:ff:6d:ce:a1:d5:7c:7a:03:4c:
68:73:26:c2:b4:a1:47:35:c8:fc:d1:08:48:3e:0b:c0:ea:97:
06:ff:93:89:bb:26:f3:8e:82:54:9b:7b:36:c0:ea:00:a3:8c:
f8:b8:dd:4c:bd:fc:89:57:f1:51:9f:90:35:06:81:8d:b9:9b:
15:d9:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:53 2025 by rpki-client