Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: OF8JDpot3Ot6joO85YOPouAuZPubiBZ6UC9Bxlwkvvo=
Subject key identifier: 1B:DD:A7:31:A6:2B:83:7D:06:B4:0E:EE:47:10:B5:50:BD:D6:A9:78
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 0198D4A7A8DA907366A6B710E83A85E41DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: A5
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: mNgcapSKUG39yDl/qxBT+TcOozDxgLhphY2bPyNdGLk=)
2: aizIqKjXfqxu2L9Do5SClHmuuHM.roa (hash: VG8x//8NLvTPdp7pULF9tX4PLkvXpJw9Gy/1Yk1G5KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a8:da:90:73:66:a6:b7:10:e8:3a:85:e4:1d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=1bdda731a62b837d06b40eee4710b550bdd6a978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:3b:37:7e:2f:97:3f:15:95:4d:5e:5c:a5:
36:0a:34:91:09:ae:d7:33:aa:25:cd:a9:af:66:fd:
8e:7b:ba:37:ff:5e:e7:b2:2e:a8:30:45:5a:d5:b0:
be:a6:a0:83:a1:d5:00:ce:7c:a1:61:e0:96:15:c3:
7e:3d:ac:88:41:da:bf:2b:78:90:cb:8a:44:07:1e:
9e:85:7a:fd:2f:ba:b6:02:eb:77:ce:62:f4:33:1b:
6a:7c:db:5e:ae:18:67:bc:77:17:c9:e7:d0:3d:b2:
c7:2c:7a:43:a5:88:ee:de:f2:46:07:c9:d6:10:dd:
f4:5b:f5:03:6a:6b:10:41:d5:22:ba:97:d2:82:c1:
10:5b:55:95:f2:43:f2:83:26:7e:8f:e9:0a:bf:96:
f4:ca:90:4f:f7:dc:c4:5e:83:2f:d2:2b:8c:5e:a6:
70:a7:b8:a9:09:20:b1:cd:ad:a1:40:14:e1:f8:0c:
69:9f:24:cb:3b:fd:2a:a0:1c:08:fb:28:8f:c5:2d:
f9:63:eb:d4:a2:81:55:3a:c9:88:0f:59:97:5c:ed:
c4:ac:14:ba:9c:9a:29:65:0d:28:32:9e:c0:bc:88:
e5:cb:f2:49:38:a3:f7:dd:bc:83:0a:55:b1:aa:58:
8b:b9:e9:eb:a6:44:e1:29:f1:a2:24:0b:93:0d:eb:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:A7:31:A6:2B:83:7D:06:B4:0E:EE:47:10:B5:50:BD:D6:A9:78
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:b5:99:ed:50:f5:5a:04:15:dc:a8:ac:78:b0:29:90:1f:
0d:4e:f9:07:cd:36:11:24:7b:c7:e4:52:bf:52:5d:54:86:c7:
fa:db:15:51:46:85:41:36:6e:a0:9c:60:e6:9b:8e:34:c5:91:
2e:45:b3:bd:17:dc:81:bf:2b:23:2e:7f:94:39:5b:d0:a5:1b:
6c:f3:d7:87:45:75:15:a8:f9:a1:a5:e0:1f:bb:1b:ee:21:ff:
3a:12:80:59:02:a7:75:67:3b:e1:6d:68:93:d5:41:22:d7:32:
06:74:8c:66:6b:fb:d4:dc:bc:ca:30:29:98:7a:6e:b8:d1:0d:
78:54:1e:38:11:a0:99:6f:23:57:c5:a0:73:e1:6b:2b:10:c8:
ec:32:c4:b4:ff:26:3b:2e:5f:96:b8:0f:17:58:01:77:a9:e5:
7e:81:51:af:86:b5:29:c3:db:e4:f6:e9:ba:92:ac:42:d9:93:
06:22:3a:e1:4e:d2:21:99:28:94:6c:b4:55:32:a2:3a:b3:e9:
5a:3c:ad:87:df:5d:5d:67:24:c6:46:41:33:0d:69:2b:fd:c9:
0c:5d:2a:95:ac:5f:0c:24:69:34:71:3c:ba:4f:57:2a:8e:8b:
50:e3:b6:87:24:80:78:8d:4b:bb:5b:68:56:55:e6:57:79:cd:
50:31:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:20 2025 by rpki-client