Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: nj0HRRe2vxE9AyrvAWet1j7jbsJMFmLGqbRkDJy5M/E=
Subject key identifier: 2D:BA:74:0F:4F:77:AF:60:36:25:E4:79:D3:0C:6C:F2:30:E7:8D:53
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0198D69841DB496E0627931AECF4B0E9489D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:39 +0000
Manifest this update: Sat 23 Aug 2025 11:02:39 +0000
Manifest next update: Sun 24 Aug 2025 11:02:39 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: 3vjp1AiK0UY3ZAbC0eUV1F3B0+Jy2KRdsSc9IqtDmYM=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:41:db:49:6e:06:27:93:1a:ec:f4:b0:e9:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Aug 23 11:02:39 2025 GMT
Not After : Aug 24 11:02:39 2025 GMT
Subject: CN=2dba740f4f77af603625e479d30c6cf230e78d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:a2:43:1c:10:2a:00:8b:c1:b0:28:a0:db:
fa:a4:f3:f0:83:f3:6a:89:1f:cf:fe:9f:bb:e0:25:
58:36:f7:f3:bc:59:4c:48:b1:22:f4:d3:1f:16:ca:
53:dd:37:aa:f9:f4:00:48:eb:91:2a:39:8a:32:b1:
cf:22:a8:f2:36:64:5b:87:77:04:74:09:82:1a:ac:
eb:a7:f2:d1:b7:f3:72:9d:39:c4:02:2e:23:99:54:
7c:a2:b3:7c:67:f4:b2:52:01:c5:3c:3a:84:a0:b2:
1f:00:68:60:6e:80:aa:e1:01:a4:cf:7b:4c:55:1c:
c7:c5:1e:5b:ec:2e:e6:20:c1:a1:a4:ed:3c:a2:14:
06:2f:5b:9a:2c:12:e4:27:b1:37:82:6d:b1:64:a2:
8a:fa:94:fa:8a:e8:49:9d:07:e9:3c:3e:54:2a:63:
0f:37:3f:8f:db:28:79:c6:56:97:dd:78:69:3e:08:
8b:36:34:fd:a7:75:f4:31:eb:7e:ce:1c:a8:d0:8d:
7a:01:ce:fd:ba:b1:d4:9b:55:1c:64:82:e4:a6:be:
43:12:1e:b2:dd:04:c0:0b:ae:37:38:3e:6f:d1:c9:
18:ed:68:fc:91:cf:53:29:51:21:9d:4c:7d:bf:94:
38:40:6c:12:c4:68:59:79:62:69:99:f8:c5:b0:e7:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BA:74:0F:4F:77:AF:60:36:25:E4:79:D3:0C:6C:F2:30:E7:8D:53
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:4f:37:e2:e9:60:f6:b7:92:dc:60:8a:37:2a:37:82:93:
9f:21:99:7e:70:bb:ee:60:5c:39:64:ae:37:18:bb:3c:fe:02:
97:0a:1a:a7:f6:20:26:b9:c2:e4:67:8d:5a:91:9a:05:7e:78:
b4:50:3b:69:b8:42:44:b6:77:4a:82:93:d4:f9:a1:68:43:07:
8b:ef:32:74:57:c9:8f:2e:da:bb:b3:24:69:7b:32:80:76:37:
b3:95:58:fd:92:44:b9:ee:9a:1d:9c:cc:91:f2:02:5c:a0:81:
c1:f1:fd:fd:02:69:b6:10:90:3f:ed:a4:87:4e:dd:f9:63:56:
72:6e:0a:91:2a:e1:8a:d7:e9:6d:ea:10:47:6e:08:b6:87:86:
63:9e:0d:80:64:45:1a:b9:12:ad:21:e9:25:e8:16:9d:05:4d:
a9:07:f9:bd:5d:4f:c9:55:31:16:1d:c0:d6:e1:18:5f:f8:e4:
a0:46:ae:cc:7a:1b:2d:bf:2e:c4:23:3a:a8:9d:65:ff:fa:33:
0c:33:05:d3:df:d6:e2:b3:a5:b8:ba:bd:9c:b3:38:f9:ea:30:
19:54:eb:82:45:e6:89:d3:6a:d8:cf:d5:47:05:b3:e7:87:da:
c2:e9:59:8d:89:09:0d:93:83:03:f6:2a:72:d3:e5:e4:3f:ed:
e7:ae:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:41 2025 by rpki-client