Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: OGXdXPnbGcKTT3ov8rG4N8fl/wjAhXtmWG0GDxu0IEY=
Subject key identifier: 31:3C:37:6F:51:61:89:AC:17:EA:FA:CE:40:22:97:27:95:6A:CA:70
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 0198D5BC3A902356E524254E972409C18F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 146D
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: cUrokHahtTtdldEV/3bgOp0RY2r80QUfcS0+3l0xfJs=)
2: WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa (hash: eYdzJRuLYCeHIGBMM52itYWmfWw58ujov0m3EgFoPMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3a:90:23:56:e5:24:25:4e:97:24:09:c1:8f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=313c376f516189ac17eaface40229727956aca70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:96:06:e0:83:e8:00:9a:5f:5b:89:4c:aa:
10:19:2a:52:8b:57:1d:63:8a:12:2d:ec:b9:17:d4:
2e:e2:a5:2b:4f:83:f6:f4:f0:f3:78:1e:80:9c:04:
80:74:2a:90:14:07:64:22:5d:2a:96:51:20:00:1f:
e5:1a:9e:d5:22:df:60:3a:33:6d:08:26:7b:d3:9a:
28:1b:4b:2d:bf:ac:96:a0:fd:44:45:17:5e:d6:b3:
ee:2b:2a:77:2d:2e:81:ea:0b:54:e5:b7:93:bb:bf:
45:73:ab:23:d5:24:10:9c:9c:92:b6:3b:14:96:45:
ac:a0:33:ba:89:ac:22:9f:73:1b:50:cb:91:a0:28:
93:5c:e7:39:67:61:cd:53:2b:53:ef:40:0d:f9:27:
bb:56:65:e0:02:17:62:91:14:ca:21:6e:bc:49:49:
59:33:6e:c0:ce:f7:1f:02:99:d3:55:13:3a:3c:97:
d9:bf:bf:62:c0:7f:26:d1:8f:ba:a7:8d:16:60:65:
e4:b5:eb:ee:fd:df:2e:ad:67:53:fe:1a:93:bc:88:
c8:d6:c0:b7:2f:df:01:ed:31:83:49:82:9b:2f:59:
b0:0f:01:17:24:a2:8b:52:d1:cb:00:70:ff:10:9d:
60:5d:41:c1:ec:3f:24:5e:37:08:93:ce:85:83:8b:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:37:6F:51:61:89:AC:17:EA:FA:CE:40:22:97:27:95:6A:CA:70
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:26:93:01:d5:29:b5:e7:f5:7c:56:20:39:5c:c5:39:04:f0:
b3:5a:1c:97:87:b6:1a:87:26:c3:d5:41:f0:8e:ad:ab:df:1f:
1d:6b:71:da:16:76:26:36:18:54:24:72:19:18:d5:f1:77:3a:
1d:da:a2:25:62:94:96:e6:af:a8:3f:f8:3b:e1:4f:e8:44:94:
93:72:3a:ef:b1:c7:82:b3:29:88:47:82:ab:e6:5b:4c:a6:06:
44:a0:de:62:30:bd:0f:f6:91:42:75:ef:41:bb:27:4f:bf:0e:
1d:7e:9e:a7:04:a8:f2:ba:ea:95:af:25:01:4d:42:57:0d:41:
0a:32:2a:1a:5f:27:88:fb:c3:f3:5c:d7:45:b0:9c:0c:c1:75:
e8:02:a8:52:bd:47:ce:60:7f:03:2a:2d:c5:c0:bf:8f:d8:be:
bf:bb:d5:db:2b:3e:54:d7:a2:f4:0f:87:81:4b:b1:dd:a4:73:
8e:02:2c:82:34:ad:eb:fa:72:93:46:11:bb:3a:5c:24:dd:1f:
fe:5a:0c:61:6c:c5:0c:74:8f:fb:1b:1e:45:94:bd:90:c4:4c:
c4:c8:be:2a:3c:e7:91:04:1b:37:c8:85:85:00:be:e7:56:15:
34:28:19:23:17:de:c2:92:a7:ff:be:d1:c6:da:18:7a:cf:0e:
e9:b4:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:06 2025 by rpki-client