Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: 24GepIC2SyPwCbOHH3mFv3BAJyVDHWAxOSu8y1bsoUU=
Subject key identifier: A0:BD:5F:0A:99:A2:B0:62:3E:37:26:9D:C5:73:AA:29:A9:0A:31:6E
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0198D5156E83AC3A965AE3B5A9D2FAEC7D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: ohQesVxIBKLCc0rhPyHLCEiDFY2X6zjUXaNs4MEwJ30=)
2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6e:83:ac:3a:96:5a:e3:b5:a9:d2:fa:ec:7d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=a0bd5f0a99a2b0623e37269dc573aa29a90a316e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:9b:ea:37:be:79:6c:16:05:6f:23:26:b5:
49:8e:59:02:34:61:e1:be:6a:d6:b9:85:7c:fc:dd:
91:84:4f:22:30:66:c1:d4:29:22:0d:8b:41:f2:c2:
75:4c:e5:91:a0:d0:e5:83:45:29:57:4a:10:8b:9d:
dc:ed:03:88:17:a7:02:05:16:6f:68:9a:62:54:99:
cf:54:b7:ad:22:05:bc:83:e2:87:bf:37:6e:f0:10:
89:43:b3:33:b5:5f:29:46:b4:97:07:0a:40:97:85:
21:6d:fe:0c:48:01:86:5d:0f:85:21:9a:22:d7:f4:
2c:3a:32:6f:68:5f:16:55:99:60:11:4b:84:6f:85:
6c:eb:78:82:81:21:b8:e9:f9:6a:51:5d:7e:3c:b9:
77:16:ec:0b:1e:d1:6b:93:88:a2:a7:1f:4d:b5:1b:
48:51:fe:64:82:af:19:c9:67:bb:2d:4e:fe:af:bb:
34:eb:97:e6:06:31:ca:1d:85:49:f6:3d:bc:2a:16:
3f:83:60:36:71:65:e6:47:13:98:3d:1c:9a:76:6e:
20:20:4c:92:d0:6a:89:d7:40:d9:40:39:9f:f7:2a:
c8:4a:24:b8:8c:57:88:71:d0:7f:a7:3d:9d:6e:32:
0f:96:8a:99:8a:cc:5f:dd:4a:38:6d:09:99:df:11:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:5F:0A:99:A2:B0:62:3E:37:26:9D:C5:73:AA:29:A9:0A:31:6E
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7e:69:b0:ff:9e:76:1f:7a:30:cf:34:11:be:0c:28:1d:4b:
10:79:10:7d:3d:55:68:90:7f:c1:32:ae:ee:53:74:cc:84:5a:
c6:6e:56:8f:5a:1d:d2:17:bf:58:73:13:41:cd:c4:f3:46:b8:
62:56:42:b3:a3:ed:a2:ef:4d:bd:7c:c1:c0:13:59:a7:c2:ad:
7e:73:e8:70:62:4c:bd:11:8b:6b:95:a0:ff:2f:64:24:5e:6e:
ec:fa:53:e0:a5:5a:96:f1:82:5f:a0:cc:fd:75:47:65:33:9b:
69:fc:19:f4:ff:f1:80:fb:c6:c4:3e:37:fc:97:24:b1:fc:c7:
6a:e5:0b:9b:13:f8:c7:41:55:b6:7c:be:46:6d:3d:0b:91:f8:
1c:37:b6:f0:08:87:54:83:1b:07:30:92:9a:82:e2:07:b8:0f:
16:8f:b8:38:26:8f:cc:36:14:c3:8a:d3:b3:de:44:3a:59:fb:
e2:d1:29:0e:be:79:86:66:88:73:fc:a2:c3:18:c2:68:2f:18:
e7:ae:df:fe:25:5a:2b:b7:04:05:f2:c0:98:a7:f6:b7:f8:2a:
f2:5d:b9:50:f4:47:a4:2e:db:42:ce:b4:69:3d:a4:ee:15:7a:
aa:d0:18:2e:2f:bf:6b:a0:b5:89:dd:b0:fa:e4:76:ae:3e:d2:
02:d1:a2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:38 2025 by rpki-client