Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: LOWgdYM7nhQT38C3p0AD5tI8VQYMFGWf3BDF5D4KmF0=
Subject key identifier: 95:6E:B8:E2:5E:41:6D:8C:FA:5B:80:A3:6E:F4:DA:D0:6F:2A:7C:48
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 0198D5BC1168229520A3EEAFD11FF2E6BA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: TcRPF8ytA8e+0G3+ftfuwJSgoSU9IGlxmaxxospyDts=)
2: MAicR0R3ncVMTkKV0oZy3oBwEck.roa (hash: WaK4eGmwJjqB7bEEMx1lPorCW+4yf4wVwlYB8uvjgfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:11:68:22:95:20:a3:ee:af:d1:1f:f2:e6:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=956eb8e25e416d8cfa5b80a36ef4dad06f2a7c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:1c:03:ab:e7:09:96:fa:f7:93:ba:f2:70:
9f:3b:79:c0:81:77:e7:e5:88:88:98:35:76:fe:5c:
24:bd:38:d6:41:8a:e9:2e:f3:75:2d:47:04:da:ee:
3d:09:18:df:d0:99:c9:39:d7:43:06:2c:12:bf:38:
65:9d:54:4a:1a:e2:aa:b4:14:2c:b2:e0:89:27:eb:
7f:bf:7d:fd:bc:3d:b8:4c:6c:f4:5e:52:33:af:b0:
9f:b2:84:b7:8b:a6:fb:f8:46:aa:55:8f:29:58:a2:
f5:83:c3:e0:11:e1:a1:09:fb:7b:37:8d:e8:8c:ee:
b5:7e:3e:c7:1f:a4:0e:79:28:01:b8:35:a5:92:70:
be:95:e2:9b:2c:b6:e3:14:44:b4:c3:d3:d3:ea:61:
07:40:34:5c:e1:8d:21:7d:83:1f:c6:d7:2e:bf:ba:
ab:61:4a:a0:47:c2:a8:5a:3a:03:18:33:6b:b6:3b:
b8:a0:99:37:ff:9f:e6:b9:b2:7f:23:d1:79:2e:7e:
76:ee:db:ea:9a:ca:5e:7e:99:67:0c:74:e3:d4:0f:
86:c0:43:9d:59:8a:7b:85:a7:f6:f4:42:b1:ca:61:
0d:39:54:93:ab:3a:6d:35:3a:cb:f3:43:a5:06:bd:
b4:33:85:47:8c:6a:5a:bf:ad:d9:a2:17:4f:8e:cf:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:B8:E2:5E:41:6D:8C:FA:5B:80:A3:6E:F4:DA:D0:6F:2A:7C:48
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:08:79:d6:68:bb:1a:26:8d:f5:97:cb:a7:8f:39:e6:1d:
48:a7:55:fc:f5:5e:52:90:2a:73:47:c7:92:7f:82:0c:51:ac:
d0:91:6b:87:c0:c9:8f:e2:7d:8b:60:7c:1d:08:26:2e:b0:a8:
c6:2c:ba:3c:eb:72:fa:66:95:3f:38:35:18:0a:30:fb:e9:7c:
7d:89:ed:4a:a6:79:fe:e0:c0:be:2e:6d:a9:61:b3:b1:65:14:
98:2c:29:65:02:73:2f:90:6b:53:cc:84:85:fb:be:76:aa:31:
e6:1b:c6:e5:39:0b:53:bb:3e:07:33:05:4d:72:88:34:0f:74:
96:f8:19:b8:d5:19:5b:c5:48:30:d2:ed:54:02:01:0e:5b:dc:
a9:d4:3b:1c:11:a6:3d:7b:85:43:dc:a4:36:58:b8:67:59:d8:
23:5d:34:a6:59:b8:a7:dd:d6:8f:3a:7c:54:ed:0a:01:c5:05:
f2:af:a5:65:88:11:89:15:b7:96:35:82:30:af:ba:50:91:36:
e2:a8:c0:e0:91:5a:84:fa:d9:2b:73:d6:01:b1:e9:de:d6:4b:
86:7b:57:32:4a:4d:d5:17:ce:a1:aa:59:ac:f0:d3:98:45:91:
58:3a:0b:24:74:f9:31:36:4c:be:94:fc:d2:e3:5d:4c:4b:08:
0d:9e:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:56 2025 by rpki-client