Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: UemmhEpEGYhZBCb8OunTselej9Hw6uMUGU1Dbgz4quw=
Subject key identifier: 5C:F0:9C:B0:60:CF:51:F4:E1:E9:98:18:0B:6D:50:33:4C:04:B4:C2
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 0198D6608649C7F0F669789F9508664B4427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 0FA7
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: c3RwquPJjN1+5D0pdopjiEPn6Mr6YEFDYsC/gk95VWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:86:49:c7:f0:f6:69:78:9f:95:08:66:4b:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=5cf09cb060cf51f4e1e998180b6d50334c04b4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:29:ff:fd:a3:1b:77:86:05:0d:3a:7d:b5:
fb:08:29:31:f2:90:03:25:19:42:34:3e:9c:a8:1d:
c2:ed:24:1e:c7:9a:ed:e0:6c:1f:ab:ee:b5:33:a0:
06:4b:ed:77:0c:28:76:11:ba:fd:bc:89:e5:b3:83:
e8:7c:7b:3b:f8:c7:e2:08:29:ab:58:b1:66:e8:80:
69:d7:3c:85:04:25:07:87:c4:a6:8c:82:bb:1e:2d:
8d:7c:b2:52:92:73:7d:39:3f:6c:ff:12:f8:c0:ed:
51:03:14:40:75:1c:96:32:0d:8b:ef:77:6e:13:34:
76:7b:f2:20:c0:8e:41:55:aa:1a:70:cf:09:53:b1:
a0:f4:ea:dd:37:dc:42:88:8c:a6:06:43:7b:7c:b5:
8d:e8:74:e4:b8:33:20:0f:4e:24:92:02:6b:12:61:
7b:8b:fb:c7:ad:af:4c:60:f9:78:3d:0e:13:70:59:
65:31:53:a7:f2:ff:14:24:18:be:36:47:bf:e8:a5:
aa:52:9f:ec:c1:c5:15:61:a3:6c:21:68:59:c5:8c:
00:9b:44:96:24:8f:e3:f7:a3:5e:ac:ec:fb:94:23:
a6:f0:20:8f:65:3f:6e:64:18:d2:41:2d:b7:2f:c4:
52:23:fb:55:da:17:b6:11:e9:78:46:42:a1:e7:b0:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:9C:B0:60:CF:51:F4:E1:E9:98:18:0B:6D:50:33:4C:04:B4:C2
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:f4:3d:1e:0a:6f:95:aa:b2:1a:84:1a:32:e1:01:ce:6b:
74:a1:cb:ea:ab:fd:06:fe:5b:89:72:20:a6:62:1e:f7:82:1f:
d4:dd:70:a2:2d:81:99:32:2f:10:39:3f:40:bb:fc:78:c8:69:
a1:ff:42:29:3b:9a:5e:aa:9c:dd:d4:06:57:a3:16:cd:cf:ff:
69:72:9e:62:c6:55:43:82:37:b8:d2:1f:31:0b:00:df:bd:a4:
e4:b8:2d:11:c9:77:8c:b8:5c:e0:d4:b9:a1:ea:26:00:9f:5b:
58:83:ec:57:6c:2a:b7:fe:27:80:fe:fd:c6:59:53:37:1c:b1:
40:7e:85:df:70:f0:92:17:08:f6:19:c2:a7:8a:18:02:cd:bd:
1e:4c:2d:96:e1:92:f5:cc:3b:ce:0b:5c:52:e2:76:e2:d9:a7:
14:b4:30:f5:af:95:2d:0a:12:62:74:a9:8c:72:24:87:e2:df:
f2:6f:ac:3c:34:ea:af:fd:54:21:03:6e:08:c3:50:e8:18:ac:
46:44:04:d2:5d:b9:d5:f5:e1:05:96:8b:0a:ef:48:89:05:24:
53:10:0d:0d:e3:35:c0:6f:d0:f4:85:45:43:76:b4:22:b8:30:
50:e6:f3:a9:25:f5:b2:2b:9e:e5:72:3d:ff:c7:66:e9:33:43:
05:13:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:08 2025 by rpki-client