Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: NnsYaHVIxRcIIgHMUA++KCXVGh8sBYTA0vYrqRMWfAU=
Subject key identifier: 82:54:AA:E9:0F:33:26:98:1F:B4:8C:E7:C8:CA:CC:B2:2F:95:99:37
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 0198D583A66A9B3634436306B26C96E99FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0D85
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: ubGz3bZB7V4VNJljKdQPQzMsZXIPmwTCB/Oa035IZ+U=)
2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a6:6a:9b:36:34:43:63:06:b2:6c:96:e9:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=8254aae90f3326981fb48ce7c8caccb22f959937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:fb:d8:e7:1d:0e:9d:28:09:58:31:58:59:
fa:59:61:44:56:5f:16:8a:76:99:30:cb:ef:fc:49:
f2:c0:d3:27:10:ab:83:cc:bc:7f:b7:35:fc:7e:6d:
74:ab:bd:55:dc:e2:d1:83:06:e9:2a:a2:06:0a:99:
f4:d7:44:a8:d9:fb:71:13:96:ad:f0:2b:77:3e:d4:
66:86:47:51:25:a1:56:d1:68:48:6e:aa:26:42:82:
1f:d5:c5:c6:5e:7c:77:c1:ef:2d:0d:b3:3d:2a:08:
cb:77:d4:2d:1c:b1:2f:9e:37:8a:a1:8c:ef:5a:60:
54:c2:ab:40:f7:a2:70:61:d9:d1:23:84:22:3d:f9:
04:47:03:00:b9:5c:23:a6:8f:08:2f:af:46:95:2d:
bf:36:88:9b:90:42:d5:26:6d:af:3e:6a:23:81:f3:
22:10:93:ad:2e:d1:6e:04:2b:9a:f2:2d:5d:40:79:
30:b4:06:78:2e:56:76:b3:c1:b9:00:7b:45:75:d8:
5d:0d:35:3f:93:99:92:3d:7e:ba:67:f9:2f:a2:52:
57:ce:d1:f3:06:82:32:7c:57:fa:83:c0:75:ae:41:
c3:c8:f5:9e:ec:3e:c4:95:34:eb:c8:cc:f9:9b:47:
40:89:9c:8c:15:f0:74:29:0a:47:ed:b5:4f:c1:14:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:AA:E9:0F:33:26:98:1F:B4:8C:E7:C8:CA:CC:B2:2F:95:99:37
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:60:56:5d:87:e0:42:e5:6d:a1:81:4d:60:9d:0d:4e:9a:44:
0e:42:3c:c8:27:1d:35:ac:06:79:e8:6e:83:16:75:99:59:37:
94:97:69:71:88:2d:db:69:0a:0d:0b:ec:62:28:3a:a2:ae:bc:
10:bd:f1:a5:7d:05:3e:c0:da:d2:56:f3:46:7e:ea:b1:7b:3d:
23:c3:fd:6f:7b:12:48:0c:d9:2f:84:72:fd:8b:84:f4:b1:54:
c2:57:68:b1:31:55:23:8f:14:5f:d9:17:8b:ae:c0:02:2f:2c:
da:ac:a1:87:76:1c:db:98:c8:4e:3a:54:b7:40:2b:94:b4:ab:
72:b9:31:72:d2:11:88:ac:0d:50:36:41:34:6f:f7:ab:2a:bc:
17:f8:e9:d0:ea:d5:7a:a7:7f:62:38:a3:25:d6:ae:d1:f5:45:
c0:91:21:03:96:21:11:b3:04:a0:ba:03:17:03:d0:49:31:be:
9c:91:d0:82:1b:a6:20:c1:1c:f0:77:88:23:a4:50:1c:09:e8:
7a:0b:14:ca:33:7a:25:0b:20:ea:15:04:fa:55:df:d5:a4:71:
62:48:9a:1c:31:87:65:e3:78:2e:02:32:d0:07:86:33:b7:6a:
8e:81:20:2c:f8:eb:b9:3d:17:40:e9:dc:ba:25:43:59:ec:f5:
36:c5:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:08 2025 by rpki-client