Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: kOVsqJZFVFEi0BpSzz4v7tJ0EaIPm2g8MG0bFDctTlQ=
Subject key identifier: 4F:44:04:21:93:C3:00:3A:32:27:B3:79:FD:19:76:69:14:3E:F5:19
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 0198D4A81A74ECA96EAE29F140AA3FE5734C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0F05
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: vNXdlplTNlcrFR6HTEaYsNnj8uq1ODwN8yLTGDR25b0=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1a:74:ec:a9:6e:ae:29:f1:40:aa:3f:e5:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=4f44042193c3003a3227b379fd197669143ef519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:99:68:b5:08:66:85:46:8e:e2:5f:fc:ba:
0d:66:20:d5:ee:03:eb:4a:df:79:67:20:8a:b5:30:
f1:54:3e:53:71:ff:09:c0:7f:18:d9:bb:fd:d4:2a:
00:9b:c5:b8:90:89:3e:60:f4:9e:4f:73:82:20:1d:
25:33:ac:82:ad:e6:d0:af:c0:28:33:54:79:92:65:
67:5a:d0:ea:25:5a:12:fd:6d:26:3e:e2:fc:78:3a:
41:c8:33:1b:f1:3a:67:ea:7b:25:e5:d7:ec:5d:a5:
75:b1:f5:99:85:1e:83:38:39:81:34:02:47:22:fc:
26:dc:d7:9f:f4:df:88:fc:32:4a:e8:06:17:10:6c:
55:04:59:02:18:53:44:9b:69:c1:b7:6c:de:50:93:
17:1f:f6:d3:bc:6a:92:58:ca:58:50:ef:6c:d9:41:
6b:90:92:48:6a:d3:4e:44:f2:a2:ab:af:72:bb:5d:
bc:76:29:00:35:4d:00:fe:c0:b2:51:35:f1:9e:b0:
e9:af:13:16:ac:38:67:4b:24:2d:57:d1:47:d4:fb:
7b:75:bf:fb:be:c2:91:5f:a4:df:48:64:4a:eb:6a:
64:31:d1:95:09:42:05:2d:ee:eb:9d:2b:60:b7:e8:
50:8e:da:4f:0f:1a:78:47:65:08:2b:c8:3b:33:c0:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:04:21:93:C3:00:3A:32:27:B3:79:FD:19:76:69:14:3E:F5:19
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5b:08:46:21:18:3d:e4:f1:9d:f3:70:b5:28:ea:47:ac:b3:
b7:b4:d2:c7:3a:5c:f3:f1:82:e6:e9:f3:22:71:54:a0:0a:19:
ac:1e:4a:3e:8f:23:0a:02:d1:97:91:b9:51:ad:fc:0c:29:7a:
29:c6:3d:06:90:89:db:e3:53:ae:53:44:42:e1:03:3d:db:a3:
7e:0c:81:24:71:d1:05:ea:39:a6:5d:7f:e0:28:a8:ab:0f:88:
db:91:9e:d2:7b:e0:a8:be:fb:4f:5e:62:da:90:9b:dd:27:e8:
0d:7c:39:c6:0d:aa:6a:ff:ab:50:47:c8:67:55:93:f0:87:02:
00:3e:46:6a:d4:c7:05:2a:4a:6c:c0:de:e8:f7:dd:1e:e0:c4:
7c:59:86:da:3b:52:bb:09:0f:1b:c0:06:bc:85:5f:0f:74:4d:
97:c4:a9:f3:8b:9a:89:ed:0f:0a:67:36:93:bb:1d:07:ec:42:
28:a5:2d:4e:4e:8b:d9:83:c5:1a:ed:b1:aa:e8:28:f0:05:ba:
f7:c9:4f:02:f4:cf:60:79:65:e7:2f:82:6a:f7:ba:39:35:1a:
a9:06:26:54:14:f0:cf:d6:05:55:e8:d7:02:54:9b:8c:1d:7f:
bb:2c:e1:72:b4:a3:ce:0a:4a:e0:f4:09:1f:9d:cb:68:b2:b4:
a7:ee:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:55 2025 by rpki-client