Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: DMNJR3Ax/Po/tpjOcE/jrAYpiRFLPdWqmA78p8EwCY4=
Subject key identifier: B8:36:62:D0:46:F0:2A:AE:FF:1F:F9:01:95:2F:C5:88:DE:57:58:97
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 0198D5BBBDDA2F01E418F402F2B1D9938BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: 77o1rOEySF+8qYwLYyUXGMZITAosWnHBCtVvOSYcwu8=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bd:da:2f:01:e4:18:f4:02:f2:b1:d9:93:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=b83662d046f02aaeff1ff901952fc588de575897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:18:55:c0:dd:2a:f9:9c:f1:6b:f7:bf:86:
3b:2f:db:4a:2a:fb:1e:60:7c:65:13:70:dc:d2:64:
03:75:eb:83:03:86:c8:47:ea:ef:4c:b9:20:5d:a2:
20:f4:0e:5f:85:be:3f:be:b8:05:dc:da:1b:36:bd:
4a:7c:3c:73:c3:71:a7:cd:1f:00:09:d4:44:39:4e:
81:c9:cc:1a:db:04:56:77:7e:78:d6:75:5a:8f:e1:
71:fb:05:97:0e:9d:63:8e:f8:c9:1c:eb:f7:17:47:
d8:c7:3a:de:cf:b0:db:90:88:a0:aa:f5:94:b6:1f:
cf:3c:3f:b1:42:11:5c:4d:05:d5:03:ed:95:01:04:
1a:9c:ff:43:e3:3a:b6:66:6c:f5:c4:8e:10:2f:54:
82:19:98:d0:c2:b7:b4:0c:b4:c4:c9:79:96:50:e7:
fe:1b:dc:ea:ad:e8:19:97:0a:8b:61:0d:81:c7:d9:
5d:07:d5:e4:5c:0b:82:d2:8f:d1:73:df:dc:1e:78:
4b:a4:d9:64:6b:7c:41:e8:fa:e2:4e:bc:63:82:ff:
60:8e:47:27:cc:37:35:a6:5a:2a:e5:e8:9e:9f:b6:
ce:80:6a:6a:65:5e:78:d2:96:80:57:96:15:3c:09:
5f:33:64:80:5a:60:bd:d0:22:2a:3d:71:4a:9d:08:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:62:D0:46:F0:2A:AE:FF:1F:F9:01:95:2F:C5:88:DE:57:58:97
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c0:7d:a3:8a:7e:f4:f8:4d:43:42:45:28:74:42:ce:51:85:
05:95:10:2d:7c:a7:31:51:a7:33:bc:76:1b:74:8c:11:aa:e7:
70:34:22:d2:a1:2f:c5:af:a2:f3:78:e7:97:eb:90:72:b6:51:
5f:c8:ff:a0:72:7f:28:f8:ca:ed:0b:ac:ec:4f:17:1d:9e:17:
27:22:b2:83:85:f8:b4:31:a0:d7:12:4d:7f:ba:74:75:ef:74:
ba:f5:c6:0e:4b:db:09:f1:36:04:db:be:83:2b:c4:8f:a7:b4:
c8:f3:cc:19:3f:12:34:19:44:c9:7b:b6:93:88:52:80:05:36:
20:88:95:b1:e7:91:c2:51:90:dc:29:27:7c:03:a0:51:a6:8d:
ca:c8:05:de:01:d4:31:0c:cf:cc:13:19:1a:de:6d:f5:d7:55:
f4:9b:1a:b2:64:8a:29:fa:18:8f:5f:cd:18:f7:a7:71:f3:bc:
0f:d5:24:89:9d:65:65:d0:25:73:84:60:5b:b1:38:43:51:07:
d2:ee:0e:04:fe:1f:88:a5:d8:55:fc:78:4c:13:2d:a2:08:80:
54:ea:24:92:97:7d:52:21:04:02:94:c5:34:3b:74:06:71:f3:
e1:fa:ba:75:4b:ca:f0:a5:d8:71:8b:6d:52:6a:d7:4c:af:49:
bf:80:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:30 2025 by rpki-client