Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: p98y6B/ADkbr90vC66uXbg0ELD0beVRWGzkcVn28WZo=
Subject key identifier: 6E:FB:0B:F6:AD:88:84:11:57:EF:C5:82:C6:10:5F:C9:2D:FB:06:AC
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 0198D4E03F1639DA90F350B7C75D78685D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: 4QwsOJsSp4Lq/DKOUj/HW7FgLndoPLSb1DMVNOy2CYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3f:16:39:da:90:f3:50:b7:c7:5d:78:68:5d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=6efb0bf6ad88841157efc582c6105fc92dfb06ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:51:5f:48:a6:87:bd:d2:2a:5f:64:d0:8f:
df:68:47:23:a5:6d:42:49:0b:a4:2e:c6:c2:a0:46:
5f:0d:99:ce:47:79:ab:64:fb:d4:a3:90:1d:03:a9:
ac:61:7e:22:cc:de:2c:9b:ac:01:ee:2d:ec:d0:0f:
fb:f6:13:9e:5c:6a:d4:de:be:dc:bb:f3:13:d5:d5:
cb:07:12:a7:d2:90:15:a4:34:57:8b:1c:b1:70:63:
58:bc:0a:49:6d:78:49:92:e6:01:ee:50:19:e7:1f:
34:58:98:70:3f:67:f4:fe:0b:4c:39:e9:76:07:73:
45:f2:36:e5:70:c8:47:5e:d5:d6:3a:e4:8e:69:be:
fa:21:be:cd:9f:e3:66:58:ca:db:8a:b4:8a:da:b8:
b0:1c:c4:ab:4b:b0:07:b5:81:f6:52:b9:9b:8a:99:
85:a0:b0:7c:2e:30:c0:4b:50:99:23:71:d0:ce:28:
45:5b:26:ac:4c:7c:45:12:f5:43:cb:f1:92:3a:fd:
70:97:37:aa:d3:8c:bb:f8:75:90:a1:35:8f:93:05:
c6:ef:cd:d8:19:31:e3:9a:fc:7a:42:b9:73:5c:6d:
ca:a0:7f:ee:65:6f:f9:ef:df:a3:93:fe:2a:66:b5:
16:80:1e:ab:84:9b:75:19:0a:01:db:30:7b:96:c1:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:0B:F6:AD:88:84:11:57:EF:C5:82:C6:10:5F:C9:2D:FB:06:AC
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:68:e7:fa:9f:3b:52:8e:63:10:9d:8b:d5:2e:d3:dc:44:c4:
e4:ff:e4:f9:85:0d:c2:4a:6b:35:76:41:1c:44:ee:4d:57:c7:
9e:ca:87:02:a5:b5:3b:76:5f:90:f3:da:e3:20:ee:ab:83:ca:
0c:73:6f:dc:5d:3d:f8:76:be:44:e6:63:0d:57:52:a8:31:0f:
7e:0e:58:ef:9a:c1:2a:e9:6a:b4:02:5d:17:84:43:8f:86:71:
84:f1:68:6a:05:71:78:42:b5:f2:c0:cd:dd:9d:09:91:d8:ff:
2f:bd:f7:bc:33:68:ce:e1:3b:cd:c6:39:ef:da:5b:b8:89:b8:
75:d1:63:cc:05:91:84:de:d6:39:85:eb:f5:0a:28:da:09:8b:
54:82:87:d3:39:64:1a:4c:1b:f3:4c:4c:65:e6:58:77:c7:60:
59:5b:34:5d:74:0e:69:86:bf:52:8b:b0:55:dc:b5:46:93:85:
fa:75:9a:c0:39:a3:41:59:08:4c:42:53:ac:2c:b5:d7:58:63:
c4:d7:a0:fb:1d:b5:4a:ea:94:6e:17:85:9d:84:6e:a2:02:d8:
9a:14:d0:51:94:fd:c6:f3:af:3d:bd:5b:59:72:e2:b9:6c:d1:
ab:e3:2d:4a:35:7d:9a:c8:5b:8f:47:a2:fb:ae:58:1d:d1:d1:
99:7d:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:23 2025 by rpki-client