Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: NtlHK74LksG99dE6bSfFENJb5zMJXXBbPrxL6YBQoBE=
Subject key identifier: 12:85:CF:32:3E:AB:B7:38:26:80:85:28:80:2A:34:F0:D6:C3:62:0E
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 0198D7732E7F54394AFF3FFB246C7BEE20B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0539
Signing time: Sat 23 Aug 2025 15:01:46 +0000
Manifest this update: Sat 23 Aug 2025 15:01:46 +0000
Manifest next update: Sun 24 Aug 2025 15:01:46 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: p0yUoHvvQZ3Ayvxlm7AXs5B7Vx9G4E7+75auDIKP//Q=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:2e:7f:54:39:4a:ff:3f:fb:24:6c:7b:ee:20:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Aug 23 15:01:46 2025 GMT
Not After : Aug 24 15:01:46 2025 GMT
Subject: CN=1285cf323eabb73826808528802a34f0d6c3620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:e7:b2:09:fd:13:5e:7b:f3:84:ff:43:a9:
4a:bc:9b:5f:9d:6c:b3:62:42:bc:b7:93:65:3c:bb:
bb:e3:3a:cd:ef:15:d0:75:c6:af:b7:2f:d8:7c:d8:
e9:5f:e6:2b:bc:31:08:e6:27:a5:5d:e0:fa:5d:b6:
1d:7c:3f:d3:ac:ad:3d:f9:e7:ec:67:ac:7d:17:86:
76:8d:5e:12:f9:7d:6d:91:8b:0f:85:fc:01:41:d7:
ee:e4:94:fa:6a:1a:40:2a:44:c0:3e:86:4e:92:34:
3d:11:83:58:ff:e4:87:63:49:97:21:4d:db:f6:77:
df:06:b8:7b:3c:de:59:bc:21:8a:05:22:4f:e6:a3:
32:84:5c:c9:a0:a9:25:41:0c:c2:49:61:37:35:34:
ea:a7:ba:0b:01:65:4b:6c:3e:b8:f7:cd:d8:1d:98:
df:da:40:98:af:21:41:06:02:ac:d8:76:13:92:e9:
95:91:8a:b3:f3:5a:84:06:9b:23:77:7c:8c:b4:c9:
c7:02:cb:22:69:73:35:1f:a8:37:ca:f3:35:82:a0:
be:56:48:cc:1a:bf:6b:89:dd:c3:32:89:86:d1:c4:
de:a7:96:bd:a8:8f:a8:5b:1d:67:51:b3:eb:50:55:
78:ae:e9:f7:95:69:58:15:ed:87:81:14:8d:d1:f3:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:CF:32:3E:AB:B7:38:26:80:85:28:80:2A:34:F0:D6:C3:62:0E
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dd:3a:e8:7d:e8:c8:2d:44:77:02:87:10:69:2f:2d:4d:c0:
fc:25:74:db:41:b3:4a:70:1b:bf:02:28:11:f0:97:0b:71:6c:
ad:1e:d8:77:f4:95:96:25:bc:61:4a:2f:07:88:6f:f7:89:62:
3b:53:d9:e7:3f:25:13:81:39:2e:49:5d:c7:13:45:36:e8:c9:
a1:cf:e8:0f:82:32:75:81:8f:8b:85:3a:6c:86:c1:e3:8c:80:
c5:16:94:d8:19:54:7b:6e:de:f4:5c:64:02:0c:7b:89:db:f1:
94:e8:d7:ca:76:9c:27:b8:0a:12:dd:e5:88:cb:84:55:03:c1:
39:25:e4:38:88:95:dc:3c:ae:4d:5a:33:39:30:a9:e3:35:35:
f6:00:07:12:06:76:55:07:07:46:29:70:ad:11:ae:8e:87:4a:
32:08:0a:1a:1b:1b:5c:0f:33:45:01:bd:42:81:72:d2:e6:71:
67:ca:c2:84:43:a3:5b:6e:34:d4:66:f4:15:e4:a1:86:63:38:
1c:75:2f:f6:8d:21:8c:cd:2c:db:29:62:c3:c7:fa:c7:df:e1:
61:1b:45:81:2e:a6:7e:49:0c:eb:f8:e6:8b:23:f8:6f:9e:70:
14:59:71:5e:22:8e:1e:2d:53:d1:1d:10:28:b3:ee:14:19:bb:
a5:f6:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:17 2025 by rpki-client