Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: nQKPT5zCQpnrd9HeB3iuTEGewGLe0IRSwb3gybH79Z8=
Subject key identifier: 6B:83:24:27:3B:6A:CB:A8:4A:C1:F0:B2:6C:15:01:81:07:BF:3B:25
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 0198D4044AED25A6F2050E3EF5B4F97165B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 11A4
Signing time: Fri 22 Aug 2025 23:01:47 +0000
Manifest this update: Fri 22 Aug 2025 23:01:47 +0000
Manifest next update: Sat 23 Aug 2025 23:01:47 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: pPmedcvp/31H+DLZfDeFB8uq/RjIAorblekszKXxNBI=)
2: iVs53h_YZF7aBqVA1FOf0up1OVA.roa (hash: UW0lfLNzDTQsdkpmCT+L1fh8JEZx2jiYpIhhq1q1Nsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4a:ed:25:a6:f2:05:0e:3e:f5:b4:f9:71:65:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Aug 22 23:01:47 2025 GMT
Not After : Aug 23 23:01:47 2025 GMT
Subject: CN=6b8324273b6acba84ac1f0b26c15018107bf3b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:19:03:ff:8b:59:f1:f6:66:c0:e7:da:8e:
bc:3d:32:94:3c:84:b7:9c:8e:73:7b:3f:df:23:06:
c5:a7:68:77:f3:20:8a:16:d5:7e:da:de:bd:10:49:
ab:cf:bb:17:41:cb:7b:33:68:8e:95:b0:ea:48:6e:
c9:69:e1:73:14:0b:8c:00:90:7e:7b:fb:1f:30:d6:
1c:db:a1:53:97:a0:8d:84:7b:f8:3f:77:21:d8:89:
39:a8:c5:4b:84:74:2d:31:50:c4:ea:61:b5:d4:bc:
e6:1b:97:32:97:9d:7e:cf:a5:87:6a:ff:3c:44:1c:
9d:bb:8a:65:f7:da:01:bc:96:94:5f:a8:02:2a:af:
1f:fd:76:53:80:e6:b4:b0:e8:ac:ce:9f:e4:85:e7:
a7:f2:a2:1b:04:09:2e:7a:9f:d3:2b:25:75:87:59:
47:3f:26:a8:e0:ea:eb:3d:92:6a:84:78:9a:ba:0a:
bc:2b:8b:09:bd:fc:3d:78:3d:b8:99:48:dd:8e:51:
0b:53:7c:3e:5e:70:82:6f:0e:be:7b:f3:1e:de:6b:
a1:bc:20:9c:48:b3:09:40:d0:63:51:fb:27:98:5e:
e8:37:37:39:c8:ec:dd:f4:1e:d2:99:39:01:21:78:
a3:a1:dd:81:cb:66:0b:93:f8:25:91:9a:e9:9b:00:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:24:27:3B:6A:CB:A8:4A:C1:F0:B2:6C:15:01:81:07:BF:3B:25
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:66:02:53:23:ee:e5:1b:66:06:4c:64:df:27:99:39:10:96:
32:18:ea:ec:ff:65:5d:e0:1c:03:4e:67:14:12:c8:e0:3f:66:
77:b3:56:12:ed:e7:03:db:03:d7:f1:3f:6f:b3:3f:20:bf:13:
36:68:65:11:52:42:32:53:0f:5f:a1:fe:c0:1c:10:0b:c8:21:
f5:78:68:43:20:64:f3:28:28:6a:cf:f7:cc:c6:c4:a4:db:a4:
d9:ed:f0:81:c5:5a:1b:8a:e3:e4:b9:f8:9c:1e:ac:4c:ae:51:
5f:11:7e:02:70:fd:ec:2b:ee:46:9c:09:de:27:58:dc:0e:2e:
28:ec:9b:a7:42:79:a3:f8:e8:40:39:34:98:fc:a5:25:6b:ca:
71:08:a8:35:ca:fc:09:3e:d4:c2:38:5c:45:a6:b9:25:05:6a:
a9:64:4e:a5:92:ae:ee:96:ea:90:a0:a2:3e:de:31:ae:a8:38:
6e:62:49:68:40:00:65:81:8b:f3:af:a5:39:1f:a4:32:0e:04:
1a:e7:83:5e:68:8d:a5:8f:db:c3:d9:74:e9:19:7f:06:ac:5d:
94:e7:0d:df:3f:12:fd:e0:02:1c:7b:c1:fb:f9:3a:f0:4b:a6:
59:cf:d1:a8:38:96:5f:cb:17:77:74:be:3a:1c:43:e8:e6:64:
0a:da:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:47 2025 by rpki-client