Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: BMVduiCpak/u1xGiz+fW2vTf6ywCHd3OsWdQwOHmEUI=
Subject key identifier: DA:32:7B:CC:54:ED:97:89:03:22:ED:21:09:10:CB:53:53:B9:91:23
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 0198D5BBF3BF94DDCBF715FF06EF194D3E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1005
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: clF2Cjudx+84xSS31NJi0J5XcO4FPsWA9JrslPg8Vgg=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f3:bf:94:dd:cb:f7:15:ff:06:ef:19:4d:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=da327bcc54ed97890322ed210910cb5353b99123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:de:29:15:24:95:b2:9a:02:e2:70:13:87:
a6:ea:31:6c:5d:21:b6:5c:84:9b:ab:3d:aa:c0:dd:
da:6e:31:8f:5b:cb:b4:b0:5a:c4:d0:fb:1e:cf:46:
6c:e5:78:8a:f4:5c:0e:12:95:43:68:6b:14:aa:53:
5b:3e:0c:d2:a3:b1:6b:84:17:87:dd:19:17:a6:92:
17:15:5e:7e:b5:ff:a2:12:cd:b6:ff:9b:e1:1f:ac:
0e:5b:bf:49:60:8a:4a:a9:c4:5d:76:23:37:7e:a2:
40:fd:4f:04:34:b0:cd:d4:7a:e4:ee:65:a6:0a:b9:
eb:09:d3:c6:94:9f:88:93:09:ba:71:b4:0a:5d:02:
0c:74:fb:a9:ca:8a:95:6b:8c:2c:04:6d:9d:1b:30:
57:5f:d4:a8:94:ef:a1:a8:05:df:d2:b8:38:4f:f8:
50:21:01:9c:da:91:0a:e8:91:72:24:68:9b:d7:af:
82:d4:bd:54:fc:13:94:1d:bd:09:c8:92:c8:35:f7:
df:46:b6:21:f7:69:b4:02:65:83:19:57:fb:a5:61:
06:33:ad:95:72:89:9a:51:21:4d:71:7c:73:72:e6:
c4:c5:df:38:79:2b:31:97:f5:17:16:34:14:b5:c1:
d1:b2:94:6e:09:49:18:44:b7:45:cc:e8:db:db:2d:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:7B:CC:54:ED:97:89:03:22:ED:21:09:10:CB:53:53:B9:91:23
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fa:8b:54:47:9a:bb:34:67:00:04:6d:b2:82:cf:91:f0:c9:
a6:af:0e:68:82:ba:15:5e:1c:87:bb:06:ce:a4:64:11:fd:ec:
bf:9c:a5:a3:da:d2:a4:af:30:51:f9:f4:42:30:34:dc:a7:bd:
d9:1d:7c:55:86:86:ee:ee:bf:a6:85:07:3a:e2:b1:9a:0f:51:
01:e9:b4:be:01:db:f2:8f:6f:99:79:76:2a:18:86:17:e8:5d:
99:28:2b:c4:7a:72:98:30:3d:84:94:7e:ad:ae:93:6d:53:07:
d0:fd:ee:6c:5e:3c:18:a5:54:f1:64:16:fe:1a:37:ea:62:6c:
66:7e:64:68:26:34:98:f0:2a:57:aa:41:f7:62:dd:5b:a6:e4:
2d:8e:7d:4d:85:06:c9:c0:7e:3f:be:77:34:3a:b8:a8:7a:a2:
00:df:29:58:54:28:1b:e2:0d:d0:f4:be:6d:e6:c2:43:a9:fa:
5f:83:58:3d:28:48:73:ab:78:38:8f:be:4e:82:b9:17:49:65:
a2:c8:06:6b:43:44:c7:dc:77:38:f7:48:57:42:c4:1e:25:2f:
01:56:64:1e:c6:30:7a:47:45:a8:c7:71:6b:d9:26:f8:28:c4:
a4:45:6b:13:51:b6:49:e4:4f:63:ec:12:f8:07:43:8a:36:2c:
7b:b2:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:22:58 2025 by rpki-client