Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: rBraZ8a4y1lc19PeCd/r5WjHgcdjfIkV/AcERjSPur4=
Subject key identifier: 23:2D:C6:6A:00:8D:CF:6F:BE:7A:0B:FD:C9:A5:7A:3F:62:09:49:15
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 0198D47270C8F639367EE060A8A0B3B18606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: k/gagK5hkTCIahV3SrsESH8iKzUCzyaPsc5vv2vslNs=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:70:c8:f6:39:36:7e:e0:60:a8:a0:b3:b1:86:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=232dc66a008dcf6fbe7a0bfdc9a57a3f62094915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:35:8c:b8:15:85:5f:fb:d0:8a:07:f2:9b:
7f:c4:41:1b:b6:cb:75:86:a0:9d:36:f2:51:87:71:
ee:05:ca:92:2c:de:54:cc:d9:21:c9:cf:e9:40:f5:
65:b2:fe:f0:d7:a4:ed:a0:6f:1a:7c:64:32:8a:20:
3c:a7:46:40:90:6b:c6:8a:6c:14:98:29:63:fd:e1:
3f:22:b3:98:50:2a:58:84:54:93:57:47:68:64:5f:
29:27:f2:c0:4c:69:8e:3f:d4:27:f2:4e:3a:b9:93:
f3:bd:bc:b6:6b:9f:d9:51:bd:4a:d8:47:28:c7:c8:
34:50:aa:87:42:12:9f:79:cf:a8:ac:3b:44:32:03:
c4:a6:c7:6d:cc:c7:ab:15:d4:4b:65:75:0f:65:06:
79:1b:86:b5:06:d7:bd:5d:0c:c0:b9:78:65:b7:a1:
21:54:44:e5:a4:bd:8c:ec:a7:12:1d:9f:c2:11:d9:
29:bb:fe:83:b4:c8:75:db:f9:a4:50:08:d8:36:00:
90:2f:a0:e3:48:b3:b0:b4:54:49:c9:1c:87:5a:5a:
e0:0d:ee:fe:53:37:90:dd:e6:ad:14:c4:14:5c:c1:
cd:27:25:29:f9:00:27:b9:a0:58:45:98:4f:ae:01:
8a:92:86:be:4d:79:7d:4e:e1:28:7c:d7:79:f2:80:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:C6:6A:00:8D:CF:6F:BE:7A:0B:FD:C9:A5:7A:3F:62:09:49:15
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:1f:b2:43:3f:78:78:65:37:77:08:8c:68:76:2a:c7:4a:46:
24:ed:ed:a9:fc:9b:c7:8f:8f:35:9f:56:5b:c8:07:bd:4f:d1:
a6:aa:ec:63:34:a7:f7:57:6f:54:b2:78:d6:32:80:8f:c7:14:
10:41:e5:2f:f5:01:60:e9:e7:cc:b6:ba:dc:f5:34:ff:07:c7:
3f:60:70:50:5b:f9:46:5c:7b:10:d0:6a:c2:15:e2:f0:2a:9a:
3a:64:f6:55:b3:a6:81:e2:7b:33:0c:4b:5a:47:95:45:4d:14:
6b:a9:93:da:da:85:e5:8b:2b:8d:43:a8:24:b4:97:75:2f:f8:
57:11:6f:64:19:0e:3f:9f:7f:83:47:41:42:39:41:a2:2b:63:
f3:91:f7:fe:67:c4:77:e3:6a:4d:91:26:ae:c9:65:4f:2c:e3:
0f:ed:56:47:0b:d9:8b:0b:6a:d0:17:1c:bc:4b:1f:9d:62:73:
03:7e:c1:07:8e:a7:66:d9:52:7b:18:11:0d:7b:ba:b5:2f:4f:
85:45:50:a3:7e:64:c4:9f:39:4c:26:ed:ff:5f:e8:9c:29:af:
ff:09:2b:a8:1a:36:44:70:af:83:d6:cd:16:d6:3e:a4:4e:4a:
82:18:9e:81:be:b2:f8:e3:c6:d9:97:37:fe:96:09:43:32:d1:
2b:bd:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:47 2025 by rpki-client