Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: N4gsFHw9OVRrDpetl2oN/nDeeDZ+D8BuFxAWkviw/+s=
Subject key identifier: 5A:99:EF:DC:17:B1:84:C1:21:D7:64:5F:C5:C3:43:48:FF:29:7A:5A
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0198D5838FD179E5E159713BFFD77ABD77D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: 6dJ/BKUE7AHHYwZb57LiuD2nInp9pT+wsKTnqQ2KwAc=)
2: DCDhVbD3fsODPYm5sUm8pjAvYC4.roa (hash: 7lv1CrpPPfO+TV6Xk6IsNlr9S02akSFzspE/euO4HYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8f:d1:79:e5:e1:59:71:3b:ff:d7:7a:bd:77:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=5a99efdc17b184c121d7645fc5c34348ff297a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:fc:e3:32:89:43:60:e8:73:7d:d2:ea:f3:
06:70:5a:27:b1:66:87:d7:de:2a:b9:47:9a:56:7c:
85:79:1d:81:19:df:8d:85:ae:25:93:c5:a5:5b:ed:
41:41:54:dd:9b:aa:72:bc:cc:60:45:36:d3:8c:ac:
76:b9:92:1f:af:3f:9e:85:ed:44:f6:69:37:78:5b:
07:e3:b6:86:ba:59:42:02:c3:0a:a8:b2:fa:27:5f:
6e:61:11:be:44:10:4f:d2:bc:96:59:2f:72:0c:57:
1c:50:8d:84:95:c7:57:d8:f9:d6:0e:b2:ad:ac:5c:
59:ee:c5:78:67:e8:c2:92:79:0b:10:cd:a6:b7:ad:
67:19:65:f6:6b:06:c5:83:9a:ba:6b:70:90:42:33:
f1:38:53:e6:48:1d:80:ec:50:73:df:9e:1a:5e:26:
e3:6e:48:71:be:7d:16:d8:b1:04:87:36:cb:9d:e6:
29:aa:bf:e1:7a:60:23:f5:eb:76:5f:10:61:b0:9e:
b2:88:6e:8d:83:13:15:cc:d0:3b:9a:35:97:42:ac:
91:db:21:ff:f3:96:bd:33:87:0b:61:0a:4a:99:60:
8a:c1:b9:28:ea:7f:a6:dd:16:0b:1e:59:2b:37:38:
0c:91:40:f5:b0:d4:e5:0a:11:86:16:a7:41:9e:eb:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:EF:DC:17:B1:84:C1:21:D7:64:5F:C5:C3:43:48:FF:29:7A:5A
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:e7:ad:8e:55:1f:12:22:d9:ab:1d:d6:aa:50:72:2a:53:
4e:d7:c8:f6:b8:41:b8:3e:33:00:84:1a:08:0a:4d:f5:09:d1:
bc:3b:28:4b:05:99:d9:e3:db:ff:b8:64:e6:66:07:04:7d:bf:
a1:be:19:5b:a8:1e:3f:4f:30:04:db:d9:39:aa:b0:d2:4e:92:
b9:16:60:6a:90:30:22:2d:ce:6c:7b:61:27:92:3a:e5:72:df:
ad:4c:27:e2:b7:81:b7:7b:02:e8:c5:e6:26:f3:1c:2e:bd:fa:
01:0a:7b:1c:73:b9:fb:be:22:91:e4:8c:0c:73:68:2d:2a:13:
0d:6f:9f:07:6e:4e:ed:c8:4e:55:8f:ec:07:c7:7b:bb:b1:63:
d2:71:bb:d9:40:0e:19:73:51:9e:02:96:9d:7b:fc:05:58:55:
f5:61:dd:0e:cb:c4:7f:4b:59:c0:6f:e2:98:32:4d:70:1f:92:
f8:d5:ae:3b:3e:32:21:f6:be:cd:51:3d:73:b6:8a:be:fe:43:
63:e6:0a:2a:56:0e:a6:fa:ca:7d:50:8e:b5:98:0d:3e:d8:17:
1c:22:de:ff:22:91:e6:95:69:71:f5:c0:31:d4:7b:39:84:d0:
8c:06:8f:8d:7a:fe:b9:f7:93:71:ba:a4:a2:73:e6:45:c1:d5:
43:3a:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:31 2025 by rpki-client