Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: 1CpsWLv09wsLXBRuuTHjgaagoqNJ1f+8dWAyF/L8Qs8=
Subject key identifier: 3D:2D:6E:84:FD:50:51:80:5D:D0:37:0F:F9:8C:E6:11:43:3E:4B:41
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 019A00A316111487A634446F4709D7E63886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 1639
Signing time: Mon 20 Oct 2025 08:01:19 +0000
Manifest this update: Mon 20 Oct 2025 08:01:19 +0000
Manifest next update: Tue 21 Oct 2025 08:01:19 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: 1+jTl1daGQqgoReq7keLp6vsKisTstY7Dp+5xSs/nm8=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:16:11:14:87:a6:34:44:6f:47:09:d7:e6:38:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Oct 20 08:01:19 2025 GMT
Not After : Oct 21 08:01:19 2025 GMT
Subject: CN=3d2d6e84fd5051805dd0370ff98ce611433e4b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:f3:91:46:4d:0c:8b:df:ac:52:78:3c:ca:
81:a3:46:e0:e4:7b:9a:5d:75:bf:38:3c:98:bd:27:
6a:0b:d8:fb:c2:8c:ab:c7:7e:a8:26:62:b7:10:01:
c3:5c:52:18:c6:8a:fc:91:21:07:2d:43:b0:9b:fc:
bc:6a:c4:52:4b:dc:c1:7c:04:e5:12:51:2d:8b:bf:
3b:b7:22:b1:6b:8c:c8:44:41:d9:b0:0e:18:25:f1:
91:18:bd:2d:f7:57:a2:88:6e:cc:36:ac:a1:fb:ad:
ab:be:95:49:48:c9:d6:89:a4:fc:65:63:ee:29:74:
61:1f:e8:1b:ec:ac:8a:e1:95:60:00:f7:2b:af:1b:
94:75:2c:34:d0:3f:a9:f2:c2:88:b9:68:8d:17:1c:
b4:81:22:25:f1:13:34:df:90:ef:cf:c5:a8:e4:62:
f2:82:32:77:0c:27:39:2b:bc:50:44:6f:52:8c:67:
47:d4:75:c1:98:ab:c0:e8:a7:e1:20:ae:b6:d2:9a:
61:3e:dc:5f:46:62:9c:8a:e8:15:42:ae:47:fb:f0:
00:88:81:33:0f:ce:84:b0:94:98:8b:5e:a3:68:40:
d4:9c:e2:2b:76:a9:6b:00:c5:b5:eb:b0:36:69:3a:
2f:90:d0:13:11:7e:fe:a4:05:e7:21:f1:59:7b:1a:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2D:6E:84:FD:50:51:80:5D:D0:37:0F:F9:8C:E6:11:43:3E:4B:41
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:6d:4c:35:21:ad:61:47:ec:99:90:97:18:3e:65:72:1a:
9b:d2:48:31:65:97:d8:ff:33:55:8a:14:e4:27:e3:4c:c6:51:
2e:c8:77:c8:ff:a3:19:a6:ec:56:43:c3:98:c5:4e:9c:74:50:
70:d5:dd:d0:51:bc:f1:ac:df:bc:09:89:36:22:8d:a9:49:57:
9c:ce:d2:5b:ee:4a:0a:76:3b:a5:3b:1b:ae:35:fd:59:ed:a3:
5b:5e:14:9a:df:93:b9:8b:26:60:a5:73:16:51:9a:25:e0:8b:
7e:b8:48:6f:34:07:94:44:6d:b5:ad:22:a5:e2:f1:da:51:d0:
c0:23:78:47:8a:71:ad:82:d9:e8:92:d6:46:8f:da:77:4f:3b:
05:68:40:20:99:f2:d2:20:d4:6c:cf:d7:24:20:dd:86:1d:9e:
01:27:bd:49:43:d4:ec:07:3d:2f:25:18:8d:7a:33:dc:09:cb:
ab:a5:dd:04:aa:29:26:c0:5b:67:c6:99:63:87:56:4f:8d:c3:
a7:c8:7f:91:c0:91:56:10:fd:46:42:3a:3c:a9:8c:e0:35:a2:
79:44:02:54:2c:6b:c3:c8:0a:59:19:d5:0e:d9:fb:42:39:b1:
ec:d9:56:ff:33:ad:50:a0:27:25:f8:c1:ec:ef:5a:d3:ff:ea:
38:57:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:07 2025 by rpki-client