Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: Unyfsx3I56cVVKVZ9BaG3Ct8NxtAlAlQQb0TLfawJk4=
Subject key identifier: 15:1B:C6:04:86:3B:B4:27:67:1A:74:27:9E:2F:DE:E6:86:1B:C3:44
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 0198D5BB9707BA5AD4C7FE59A434C7C60C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0CA4
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: iF7Q+ALk0h4HITFcgCFqJUT+IiFVSBVGLEAvJcwjsas=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:97:07:ba:5a:d4:c7:fe:59:a4:34:c7:c6:0c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=151bc604863bb427671a74279e2fdee6861bc344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:e6:45:fb:48:da:6c:8f:7f:3f:a0:40:f6:
13:4c:4c:24:5a:3e:1c:98:ab:b6:54:0c:64:84:7f:
7e:61:1a:13:19:c3:04:3a:8f:2e:bf:18:4b:7f:b7:
7e:f0:43:5c:02:ba:f7:a5:13:8f:a4:de:ac:10:0a:
bc:87:e3:85:1f:a7:06:aa:04:61:e9:10:e5:34:e9:
26:e4:b2:ba:fe:21:b5:0f:1f:d5:fe:31:ef:6c:d2:
8e:35:ce:9c:01:fd:1c:07:40:17:c0:5a:69:4f:cd:
84:fa:f2:2c:00:c8:8f:91:5a:64:4c:a2:6a:ab:cb:
8e:eb:bf:99:c1:34:42:48:2e:40:a4:c8:fc:bb:4e:
dd:e8:b4:de:3a:1e:91:9e:8c:96:25:5c:91:0f:22:
5e:cf:cb:92:4f:42:41:de:1f:8b:7c:bd:58:72:b4:
a9:9b:c7:d1:a3:88:e7:c4:28:49:91:cf:7e:1e:37:
76:00:cc:77:34:8f:cd:12:21:ce:81:4d:bc:00:1c:
eb:93:d1:4b:f1:c6:1e:83:79:21:0a:cb:62:5e:87:
7e:ce:9c:82:d5:bf:82:89:6e:ac:44:14:18:63:52:
ab:13:e8:e2:8f:c2:67:14:50:b8:57:5b:ff:9e:6e:
92:94:23:ef:01:45:8d:12:1b:7c:cd:a0:9d:3d:45:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:C6:04:86:3B:B4:27:67:1A:74:27:9E:2F:DE:E6:86:1B:C3:44
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ca:f7:0f:10:15:f8:d8:db:63:6f:de:cb:32:71:cc:f0:36:
cf:e0:0c:57:2c:7d:1b:93:f1:f3:29:4c:55:21:4b:29:50:85:
b2:4b:f4:e3:b5:9d:64:c1:a8:7f:05:2d:b7:49:fd:07:66:28:
0f:57:26:28:06:05:3e:9b:3f:1e:1e:0f:6b:69:f5:f2:15:7e:
5e:f6:4e:53:fb:eb:80:b1:3e:75:bd:be:ac:c7:ab:88:2e:ff:
81:f3:ab:75:e4:63:00:48:1f:36:0c:4d:a2:7f:ad:71:0b:44:
dd:df:85:31:43:ce:20:11:0e:2d:9b:4f:ce:ce:86:4e:6a:97:
5f:15:a3:d7:c9:dd:17:db:6a:c4:36:33:09:ae:15:c5:af:52:
07:5f:18:31:e2:54:53:1d:e5:25:22:66:49:c8:ce:2e:cc:dd:
ef:cd:cb:37:a8:49:fd:c7:92:9f:9f:8e:fa:f5:8e:45:4e:eb:
9f:46:b5:8c:af:8c:c5:d2:72:c6:72:fd:7b:16:a3:f0:bb:c2:
5e:52:3e:92:19:fa:6e:b4:4a:b1:75:55:0f:3e:5b:e3:42:b2:
b0:ee:a8:cd:41:b2:5b:20:1c:44:31:50:25:ce:17:97:63:69:
ab:80:8f:88:7e:c0:ff:c6:8c:3c:62:bb:d7:02:db:a9:9d:15:
cb:8a:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:38 2025 by rpki-client