Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: D0e7ia9n+9Onyi3S3WZ3v8eupvMzHWV7EkbfxcNFNLk=
Subject key identifier: C4:95:17:C3:70:1A:31:58:65:58:CB:EA:6C:45:1A:A3:62:24:45:5C
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 0198D4E05EFC013202539471F9D60137B0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: 7R3zYVlJ+3Jz25Glt4Xe7bUlZphAZk3xRIyghkg+pUs=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5e:fc:01:32:02:53:94:71:f9:d6:01:37:b0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=c49517c3701a31586558cbea6c451aa36224455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:2a:e4:2d:2f:b4:cc:35:b9:bf:dc:40:cc:
17:ee:7f:94:cd:05:84:e5:03:90:0f:53:e3:2f:98:
51:ad:df:30:39:eb:cc:b5:18:af:ab:8a:39:81:a2:
b2:9c:9c:10:84:73:dc:88:0c:84:e6:be:e1:2d:1b:
c1:2b:18:6e:70:ff:3e:eb:25:47:75:1c:d4:a2:91:
57:b2:64:e1:64:2d:af:a3:17:6b:28:6c:bc:62:e9:
f1:0d:03:d2:6e:36:72:10:04:47:2b:8b:25:b8:59:
be:b8:b5:b7:db:9e:4f:b0:7c:3c:3c:c3:08:45:5a:
54:91:12:28:3f:7d:d1:e1:73:73:a2:bd:25:ee:a5:
f4:59:ec:74:5a:86:8a:b4:6e:53:84:d8:0e:8f:78:
75:52:7b:26:c4:d2:ab:b1:10:ed:d9:60:06:99:6f:
9c:c0:09:25:1f:23:50:e4:b3:98:23:ce:45:c0:34:
12:be:04:2a:c1:ba:3e:10:2f:96:e9:c6:04:fa:fd:
c0:b7:e4:61:3e:bd:28:2b:a2:04:d3:8a:83:37:3b:
a3:70:d1:7f:a8:98:55:24:fa:25:66:95:5c:fb:46:
1d:06:79:70:3a:71:96:4a:56:27:e3:98:d4:86:38:
fd:fb:55:6a:1c:b4:b2:ec:58:f3:1e:d0:e1:91:43:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:17:C3:70:1A:31:58:65:58:CB:EA:6C:45:1A:A3:62:24:45:5C
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:3f:3a:10:3a:de:cc:1b:1b:08:ba:dc:31:94:49:8a:04:
ec:66:36:43:0b:3f:c5:bf:b8:94:f7:61:ca:f1:fc:d3:e3:dd:
5d:b5:f0:c0:70:82:f0:26:cb:86:04:f4:6a:17:3f:79:bb:e7:
f6:9c:ca:2d:16:83:02:25:7c:61:59:28:33:2a:0c:3a:86:22:
5c:96:85:7c:14:b9:89:01:f3:b2:40:f7:98:f9:c1:85:74:85:
c6:74:26:06:60:1d:87:47:25:96:89:ba:8b:6a:60:91:b0:6d:
0a:6e:a1:be:62:ad:d0:f1:f8:0d:21:34:4d:1d:68:dc:0f:61:
0d:c2:df:38:5b:0b:06:00:58:ad:cd:b7:e5:3c:5f:de:92:4e:
70:d1:ea:62:5e:30:2f:cd:7c:57:e2:92:55:89:33:50:19:08:
03:b2:9b:68:10:69:5e:77:7c:55:c2:7c:ca:f7:80:73:ca:02:
34:ef:f3:a3:2d:52:04:2a:66:d4:e4:09:5d:77:22:71:0a:77:
30:0e:8c:29:8f:91:14:c0:95:e0:85:17:b5:e9:e4:46:48:ae:
65:5f:df:c9:06:a5:c8:a3:25:da:fc:0f:82:24:cd:ac:0b:e3:
f0:73:ad:b1:97:74:ba:7f:2a:b1:43:51:0b:71:d9:eb:b5:35:
8a:44:86:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:23 2025 by rpki-client