Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: 5NX8VzOSDwQc+IsYR1dBI9kAGcFhVuajTPqKNfUsqxY=
Subject key identifier: 71:19:F7:5A:41:4A:98:46:15:6A:79:00:7C:45:B2:CD:DD:C7:FE:F9
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0198D6CCE20F244CD6DEB30683DFE4F7EDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:08 +0000
Manifest this update: Sat 23 Aug 2025 12:00:08 +0000
Manifest next update: Sun 24 Aug 2025 12:00:08 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: u8Wi17uWV0u/FhK/ldZiqMAeGYMQJraVDsFLHfCPATs=)
2: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
3: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e2:0f:24:4c:d6:de:b3:06:83:df:e4:f7:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Aug 23 12:00:08 2025 GMT
Not After : Aug 24 12:00:08 2025 GMT
Subject: CN=7119f75a414a9846156a79007c45b2cdddc7fef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:fb:06:bb:b7:8a:c8:4c:be:b8:c4:50:f0:
94:fd:4e:30:0a:45:b7:b8:9c:ec:8e:60:99:d2:93:
f1:91:db:c0:49:f5:f9:22:ef:53:30:43:e5:d3:aa:
15:74:80:e0:bf:cc:e8:fe:da:9a:81:1b:d7:6a:88:
79:23:b6:ed:64:ae:4e:7c:74:0f:6c:e4:54:0f:d6:
c6:8d:d4:2c:77:36:6d:a4:08:28:39:fd:96:dd:49:
69:e3:9d:d1:28:b9:30:d4:3e:be:1d:dc:e8:bd:15:
af:5a:3c:33:3c:40:af:8e:bb:42:33:63:6c:55:5c:
41:d5:5c:de:79:dc:ba:58:41:88:3d:9b:c1:ad:ec:
96:ee:e5:e0:a9:b1:3b:f7:9f:17:8f:17:41:10:f0:
5e:bd:1e:da:1c:e1:06:56:75:d7:df:88:44:40:9d:
4c:40:a5:2a:7a:9b:bf:44:e0:8a:e6:62:8e:b0:69:
41:26:28:32:01:e5:ef:41:30:e5:98:ed:67:16:a8:
87:77:70:00:d4:bf:5c:bf:f3:f7:ac:cc:84:3a:42:
0e:a3:04:84:ab:cb:95:46:62:e3:7c:d2:c5:28:c7:
cc:d9:fe:c8:98:dc:03:c6:45:08:08:65:50:97:e0:
e1:e5:36:a8:49:c3:d8:9b:79:e7:98:e1:13:32:e6:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:19:F7:5A:41:4A:98:46:15:6A:79:00:7C:45:B2:CD:DD:C7:FE:F9
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:d5:e5:b5:f6:a0:b7:d2:27:3d:16:c6:4e:9d:c5:e1:62:
02:21:dc:e3:5b:09:5e:2b:35:a3:d0:0f:0b:e3:fe:7b:1c:3c:
8c:7d:2f:55:36:8a:2a:49:a0:00:98:b2:7b:b6:b2:f7:f1:af:
5a:e7:3c:ff:5a:94:9a:b8:07:83:9b:8d:cf:f6:41:50:99:f1:
7d:fa:30:2d:77:dc:65:c1:20:3d:5d:d2:0d:0a:b8:a3:15:d5:
6e:22:09:60:e6:e6:c9:63:15:2d:3c:c7:92:ae:94:35:c3:43:
62:16:25:1b:4d:2c:ae:c7:3e:21:ea:e2:cd:01:26:66:6f:e4:
17:9c:b9:f1:8b:61:60:16:9b:2d:0d:88:65:0a:a0:75:71:4d:
08:fc:94:c7:27:b6:9a:7a:52:d3:d5:01:ce:10:59:92:41:24:
13:85:98:95:dd:2f:b6:fc:e9:59:dc:8b:fa:78:f8:33:10:25:
27:1e:10:fe:a3:ca:b1:aa:8a:84:27:97:f3:28:22:40:c8:9e:
94:c0:03:6f:94:f2:6e:b9:4e:64:e9:52:9e:8f:3d:a6:2b:b2:
4f:f3:3b:2c:52:33:76:ba:80:70:3e:c3:36:42:a9:eb:90:97:
87:a4:57:30:08:49:1a:4d:68:8d:cd:e0:7e:c0:16:ac:e6:e3:
88:35:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:11 2025 by rpki-client