Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: zRW6+aXJvHFxpiVt02ygCUt5AAB/wY96Xadp9Np+wB0=
Subject key identifier: 9C:4D:F2:AE:F5:A5:84:BF:6C:33:BA:79:60:23:34:D4:DC:01:23:B6
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 0198D73BA406C56C7AE7A194C73AF888C875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:01:06 +0000
Manifest this update: Sat 23 Aug 2025 14:01:06 +0000
Manifest next update: Sun 24 Aug 2025 14:01:06 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: yOlvb3UX4MwtqaDw+kt73T2yIJwRiO3xJzmnPw/oX28=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:a4:06:c5:6c:7a:e7:a1:94:c7:3a:f8:88:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Aug 23 14:01:06 2025 GMT
Not After : Aug 24 14:01:06 2025 GMT
Subject: CN=9c4df2aef5a584bf6c33ba79602334d4dc0123b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:31:34:fa:8b:15:de:d9:a5:fb:22:96:59:
d8:90:24:ec:3f:47:97:fe:c0:a5:be:ba:68:70:4c:
77:9d:89:b8:a0:4b:6d:29:2c:d5:ab:97:75:0b:ce:
b0:b7:aa:48:11:df:bc:4e:e4:61:85:e2:7c:cb:44:
1b:81:95:db:db:f0:c9:eb:2f:6e:25:d7:cc:6c:ea:
4d:58:72:a6:c5:78:02:c9:cd:e2:3d:6b:b8:31:bd:
a0:f4:5c:ea:04:bb:37:6f:f9:cb:6c:cf:8b:d7:98:
ac:4f:21:e7:9e:f1:f0:3d:b4:78:bf:06:f0:dc:eb:
ac:87:d9:ed:8f:9a:c4:76:a2:d0:48:76:f8:49:de:
e8:27:d3:0c:8c:77:9b:95:4c:d6:ec:39:fc:ed:41:
0f:4e:91:06:f3:60:43:9f:30:0a:b6:23:6f:5e:e1:
a9:41:12:f7:b5:6f:17:21:30:a7:31:de:63:dc:a1:
56:20:54:00:b0:5e:16:f7:99:28:90:10:cd:1e:5d:
40:a1:3f:c9:58:05:a2:2d:12:96:87:34:10:e9:4e:
b1:b9:bb:f4:c4:46:45:12:ea:ae:0f:04:3c:fa:fc:
c0:17:8c:2e:75:40:4f:8e:59:20:39:95:ab:96:fc:
47:5e:cd:00:43:69:db:3e:6c:10:0c:6a:20:42:c0:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:F2:AE:F5:A5:84:BF:6C:33:BA:79:60:23:34:D4:DC:01:23:B6
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:02:39:6d:6e:36:00:79:25:98:7a:63:0c:f9:d9:2c:20:0a:
e9:c3:8b:6d:d6:1a:10:cd:7e:c6:6b:5b:b2:cc:a5:fc:57:1a:
01:ef:c9:f4:90:d9:88:2d:c1:a4:16:32:e4:7e:c7:d5:80:86:
1b:22:a7:cc:64:26:59:01:48:51:86:ef:9e:00:9d:86:6b:aa:
51:2b:68:89:f4:18:04:e1:ef:40:96:5c:eb:a5:06:7c:3b:bc:
c7:4f:65:8a:be:d5:64:9f:eb:92:1a:a8:b4:b4:fc:c9:e0:f7:
af:19:9e:d0:03:c9:a6:f2:80:d7:33:3c:00:34:45:aa:d2:de:
c3:91:89:72:2d:dd:1b:85:ec:0b:1e:0d:2d:e4:66:f9:74:c0:
67:b7:f8:7c:3f:50:03:bd:71:51:d5:df:dc:17:c4:a5:61:7d:
19:0d:7f:92:fd:6c:df:30:1a:45:85:6e:10:47:e1:7e:fd:a6:
c0:4a:1f:e8:aa:83:62:ea:47:68:db:0e:1f:e9:27:06:2b:36:
c3:40:a1:8a:5b:70:15:0f:14:45:78:77:14:03:f8:85:e3:e1:
bf:d1:ca:0c:dc:ad:a4:4c:47:ab:fa:81:c6:28:2e:0f:24:46:
6c:85:cf:68:6d:e0:69:30:5c:60:f1:bf:2d:f1:23:7e:0d:ca:
c5:c2:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:07 2025 by rpki-client