Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: gH78knOats6OdTFKlepAtIZz4OkwP7YmIVjAaLYQ/S0=
Subject key identifier: BE:D6:47:B5:3C:E5:D2:71:AC:53:09:B8:87:2E:C2:70:E2:1D:20:E0
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 0198D54EBBF1D090F62048147289442CF97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0BF6
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: xtEzSilq4iDfPcqzx7BHhhWdcZTwJXnh7HAzEwZ/0bw=)
2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bb:f1:d0:90:f6:20:48:14:72:89:44:2c:f9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=bed647b53ce5d271ac5309b8872ec270e21d20e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:02:ce:85:be:c8:71:2a:9c:61:da:8d:08:
19:56:96:e7:22:8f:a1:3f:1c:3e:4d:2f:45:0d:8d:
b3:1e:37:2c:72:fe:d9:83:1a:bd:bb:a2:1f:6a:de:
e3:4c:df:9d:ee:d0:05:d2:b2:63:56:38:e4:54:ce:
eb:11:b3:3f:59:17:bd:2f:71:f5:f9:9e:f5:cc:c5:
f3:4a:a7:84:e6:65:98:ee:7a:4c:c4:f3:39:96:d5:
23:fe:db:a7:80:27:1f:a3:d7:02:0a:d8:4f:f4:51:
72:d7:1e:f6:59:a0:3f:72:97:d1:6a:c6:ed:af:fd:
4e:47:58:3b:1c:53:5a:57:81:83:05:14:56:2b:34:
8f:67:4a:53:bc:7d:dc:47:72:d9:42:40:5f:78:48:
45:3a:50:3c:f1:19:4f:b6:02:01:08:f6:88:10:94:
e2:af:d2:35:63:32:af:fe:69:bd:ac:88:54:7f:be:
23:41:56:06:ab:84:f0:4d:3c:6c:0a:77:27:fd:d5:
e6:29:82:59:4c:f6:dc:b8:04:e6:f0:2d:9e:2d:3d:
5d:d3:52:a7:f6:88:ac:a4:09:6b:e9:2b:3b:b8:ac:
eb:00:55:a3:a7:40:37:db:24:49:36:69:31:16:af:
2f:88:e0:ab:4a:a8:50:e4:d9:05:9f:6d:3d:11:33:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D6:47:B5:3C:E5:D2:71:AC:53:09:B8:87:2E:C2:70:E2:1D:20:E0
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:64:3e:c5:0a:1b:83:bd:fa:2f:ba:b4:fc:95:56:d0:ef:16:
cc:0b:69:2e:22:85:07:db:1e:1c:da:b0:3a:f7:56:aa:27:91:
2a:71:ed:1c:a1:4b:98:95:ad:db:d2:d7:54:fd:8f:e2:0e:c3:
9d:d8:5d:19:44:63:9c:10:39:82:78:04:9b:b1:2e:da:79:20:
f3:31:f6:8f:b1:e9:5a:76:52:c6:d9:08:82:f4:9e:c5:df:21:
57:89:26:18:ea:d3:8c:96:48:17:c4:8a:e7:4a:0f:7d:ee:ef:
28:b3:b1:b3:7d:0b:6a:dd:3b:52:d2:f5:e9:9f:05:c3:0f:e8:
7b:d4:3a:fb:06:b9:a2:5f:91:9f:e7:c1:1c:fd:62:1d:90:cd:
da:13:c1:45:2b:2e:1b:7c:18:06:80:e0:73:fe:df:dc:2d:7b:
28:01:67:68:93:31:61:a5:8b:4c:aa:c8:f8:f3:8f:70:bf:c2:
de:fc:13:43:f1:29:99:3e:a1:d3:19:60:e3:45:1e:b8:73:5b:
5b:28:76:73:7d:a6:71:50:48:a7:8d:3d:5a:2d:17:6d:3e:47:
4a:2c:04:46:52:3e:f3:53:53:97:70:48:02:26:2b:4f:4d:6e:
c7:2d:c0:64:53:63:7a:6b:7e:fd:dc:15:8a:d5:78:c9:fa:a5:
c2:da:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:25 2025 by rpki-client