Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: 9uEeCRmgEYbu/1T5CyCvIgF277APj1DmigCyBiMtBtI=
Subject key identifier: E6:2C:51:A9:57:29:C6:1C:71:41:20:2E:F2:63:E0:84:23:D1:11:A4
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 0199FC21A3E8BC72FF3273FAE57A52EDA974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0C08
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: Le09gu+kIq9GImkdnvycBj3ARdfTOgZWVDw6VqZAu54=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a3:e8:bc:72:ff:32:73:fa:e5:7a:52:ed:a9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=e62c51a95729c61c7141202ef263e08423d111a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:53:a0:d7:cf:8e:e6:06:e5:12:32:3a:0b:
30:e4:8a:9d:41:ad:3c:74:87:bb:58:b9:02:eb:3b:
22:b8:d7:72:30:93:a6:be:52:64:85:51:b9:4a:74:
fa:84:c1:97:8f:cd:5e:b6:ab:88:b2:80:d7:52:38:
70:00:7e:11:78:02:0c:6e:d8:48:15:63:c5:ec:d3:
d0:0d:e7:af:52:e1:cf:18:02:d4:bb:52:54:e8:61:
ef:ba:5f:ec:5c:91:33:0f:de:68:a7:9a:97:18:8d:
dd:db:71:31:39:bc:30:8f:96:ff:e4:1f:ee:93:85:
a8:6e:cb:d4:e7:46:6b:62:49:8b:13:f5:67:ee:73:
20:b8:cf:e9:73:00:9b:e7:e1:bc:4f:92:b8:b5:1b:
be:20:f3:26:a1:98:d6:8e:2a:a8:be:f4:2f:e1:83:
6f:55:a5:34:c5:54:86:d8:22:95:46:d5:dd:f9:3d:
06:63:89:9e:0b:a8:14:79:57:1a:a1:84:25:27:5a:
1b:e6:83:4d:34:a5:5e:91:15:50:97:aa:53:26:ed:
db:33:cf:f2:0d:76:6e:7f:02:14:eb:24:7c:bc:6d:
4e:8f:62:ac:c1:70:bc:c3:ac:b4:c6:ed:ba:cb:aa:
49:28:de:ef:d2:a4:cc:74:43:dc:99:da:f1:16:16:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2C:51:A9:57:29:C6:1C:71:41:20:2E:F2:63:E0:84:23:D1:11:A4
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:90:dd:fe:f6:b4:0c:37:1a:69:ab:49:0b:49:f4:ef:6e:e8:
6f:47:1a:0f:ea:4e:4b:e9:5b:21:8b:d3:16:41:10:5e:db:43:
ff:45:29:94:28:b9:b6:9e:af:51:ff:88:f2:0c:dc:95:34:5a:
0e:82:75:ba:4e:2a:80:75:d0:a4:06:1f:17:ed:44:df:de:0c:
88:f5:6c:ee:40:bb:f3:d1:ad:5c:ce:3f:7d:a8:f5:3d:f9:6f:
6a:09:48:f7:79:09:34:69:4d:0b:0b:58:cb:06:92:28:eb:d6:
18:0e:ef:14:f0:db:29:64:30:ba:84:ad:38:b5:de:75:4e:98:
58:f4:f9:28:a7:88:79:f7:5c:30:74:00:aa:90:14:34:06:cd:
88:f7:6c:b1:12:bf:1b:b0:42:63:48:4e:3a:52:c3:89:b4:19:
32:ba:e2:44:60:48:05:09:da:f3:e1:d3:73:9e:c3:90:6b:97:
9c:05:4b:ff:24:56:9e:62:e2:c7:c6:85:a2:43:56:c2:20:83:
80:8f:a2:11:6e:65:cc:ef:9a:30:1b:68:f5:81:58:1c:70:e7:
fa:79:d2:3e:ee:91:b9:62:58:50:0d:58:2b:8b:76:87:36:8a:
71:a6:18:9f:f0:f7:ee:ed:8b:2e:2b:d6:12:37:35:9d:71:ce:
e8:b2:ef:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:37 2025 by rpki-client