Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: aPE3JxzuFWEFhydC7iDkq95ZMhMuJwqdqXd4SBChw+E=
Subject key identifier: 86:A0:A2:92:60:5E:A6:57:51:31:DC:63:67:07:69:2D:6F:32:50:DA
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0198D6988777C8EC6627604B34A6602121DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 10EB
Signing time: Sat 23 Aug 2025 11:02:57 +0000
Manifest this update: Sat 23 Aug 2025 11:02:57 +0000
Manifest next update: Sun 24 Aug 2025 11:02:57 +0000
Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: YrTWKlAQzIybaWA6f07cROvNFy31bTiF9+BAXFueoQQ=)
2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=)
3: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:87:77:c8:ec:66:27:60:4b:34:a6:60:21:21:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Aug 23 11:02:57 2025 GMT
Not After : Aug 24 11:02:57 2025 GMT
Subject: CN=86a0a292605ea6575131dc636707692d6f3250da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:02:22:96:5a:e2:f1:35:b4:3b:e8:5e:8b:
9e:de:86:e0:c1:da:8f:8b:2f:96:77:f4:0f:8c:48:
62:7f:8b:24:23:62:ab:48:e9:08:ad:e5:b1:a4:09:
29:8e:93:e7:75:e5:ed:2e:0c:b2:e4:bc:51:ad:c1:
e8:3d:d2:c3:0d:fd:ca:51:8a:ad:33:31:3f:98:e7:
08:27:b2:61:df:f0:c1:15:60:08:95:56:5e:60:80:
42:4f:2a:c5:5c:19:26:be:91:57:cb:ff:00:40:c8:
6b:39:5c:a9:e5:07:64:bd:4a:fd:90:b5:46:7c:c0:
7d:92:da:0e:c1:a6:4b:67:d7:4d:36:b0:67:1a:37:
b9:1e:d0:37:15:ae:e9:8c:7d:b2:ea:f8:56:59:35:
26:c0:81:d2:8d:7a:85:d1:1e:47:8c:3a:6f:01:ae:
ac:cd:39:56:3a:78:0a:1f:a1:47:55:f9:cf:ea:19:
e2:80:7a:22:4b:95:b5:15:88:a8:f1:e1:ea:14:87:
49:da:92:44:1c:1a:d2:f2:a5:a5:53:41:d4:68:7b:
43:32:9b:85:d1:6a:30:6a:98:f8:3b:bb:44:c6:76:
6f:fc:0b:1b:57:ec:4d:57:16:65:13:72:0f:59:34:
26:c1:59:99:ff:b2:51:6b:f8:3a:4e:10:79:52:81:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:A2:92:60:5E:A6:57:51:31:DC:63:67:07:69:2D:6F:32:50:DA
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3b:a7:10:84:94:2f:a0:50:17:17:2d:2d:8f:17:48:6c:2a:
30:6a:b6:88:56:7d:11:2e:95:13:fc:32:71:1a:d7:bb:3d:53:
5e:4c:ad:e1:17:3b:01:e2:ec:94:34:0b:47:f2:a8:51:f0:50:
08:5e:38:1d:45:36:84:ea:94:90:50:54:87:6d:d6:37:00:a9:
db:7a:2c:3e:62:e6:49:77:fc:ed:51:ff:d3:89:3a:31:21:c0:
cf:ce:e6:94:3f:a9:50:4f:6b:b3:e4:0d:0f:60:45:e7:98:3c:
6a:79:ca:8f:e8:3a:f3:c3:a7:27:6e:c3:74:79:20:35:1e:5f:
86:aa:35:7c:59:72:85:6a:d5:7e:39:93:53:8d:7a:ee:6f:e6:
80:0b:3f:0a:77:01:d1:c9:54:b9:d3:20:41:7b:23:6d:b7:a2:
e3:31:ed:c7:8f:ab:cf:b4:f6:40:05:61:99:45:bc:23:be:f6:
81:6a:c8:54:90:b3:4d:51:cd:20:27:a0:95:15:95:c6:01:0c:
5a:3d:ac:1c:b6:e1:01:1b:0f:6d:36:8d:e4:59:ae:93:d5:e3:
40:37:1c:76:a3:6f:66:7a:80:6a:03:88:f8:51:9a:de:ed:6c:
82:dd:84:b2:2b:04:36:d2:16:4d:65:b4:14:0c:09:78:bc:e9:
bf:e4:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:47 2025 by rpki-client