Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier: 6n97fk/duGmey7vW9Qa9Uem/kSwPo2v1F2li1tVFqFQ=
Subject key identifier: 59:3A:88:7E:74:D6:26:E6:91:97:FA:B8:36:83:C1:26:13:9F:46:CF
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial: 0198D583F907B82985A58B7764BC1A73F1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number: 0ACA
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: J4XZtMETXofWiIr/hiKxO5+xEIOwQO1kcT876PkZ57U=)
2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f9:07:b8:29:85:a5:8b:77:64:bc:1a:73:f1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=593a887e74d626e69197fab83683c126139f46cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:4a:82:cd:ee:9c:29:b5:6a:57:a0:17:67:
77:d1:27:5b:96:6a:71:74:d0:fb:c2:e4:0e:ec:53:
5c:76:56:7f:64:fc:20:74:b7:b9:3d:a8:ae:79:9c:
4a:c4:b1:98:2b:d8:61:a4:81:75:f9:d6:c9:5c:f9:
47:c9:c3:8f:a1:d7:5d:9e:e8:04:37:81:f7:87:5a:
81:41:e9:28:da:bd:73:91:e5:20:22:52:4c:bc:53:
94:1e:4b:08:4f:ff:a0:ca:f0:ec:7c:eb:fd:fc:a4:
5e:a5:ad:78:29:71:92:06:fc:f9:89:0c:13:93:d9:
8e:05:2d:91:06:ff:c5:eb:87:b6:0c:08:31:85:49:
9a:6b:81:5c:2e:73:1b:b8:71:a0:38:ce:75:6b:9b:
f3:fd:22:dd:06:75:ef:8e:57:79:73:aa:2b:66:1d:
a8:ef:f0:08:01:54:e5:a7:44:90:60:c6:33:aa:89:
f5:2c:ed:c5:e8:ee:cf:28:48:60:cd:a3:61:4e:0b:
be:2b:1b:91:8b:08:d7:b0:40:0a:e1:53:0e:e4:22:
f9:0b:df:45:8f:4d:b1:47:70:f0:ee:22:4d:35:3e:
4c:9c:9a:e1:92:14:68:b0:55:60:0a:3a:30:66:36:
80:b6:62:cb:9d:b3:6a:96:be:50:e6:cf:4d:38:92:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:88:7E:74:D6:26:E6:91:97:FA:B8:36:83:C1:26:13:9F:46:CF
X509v3 Authority Key Identifier:
keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9a:78:ca:2c:4a:76:e7:3d:56:de:e2:17:2d:79:39:6c:cf:
68:e4:9b:80:cb:22:eb:00:e3:2f:ba:89:be:23:83:e9:f8:8f:
22:c8:f4:ce:27:19:4d:70:74:cc:cf:cc:bd:09:25:4a:db:5c:
b1:3e:a2:d8:ce:31:fb:66:35:9a:e9:22:52:33:35:07:9b:c3:
7b:1a:96:47:cd:9a:bb:d8:a6:c4:b8:50:39:1c:85:94:f5:25:
98:d7:e9:f6:eb:78:92:85:49:86:8e:8d:1e:d4:12:bf:53:9c:
02:5e:eb:0a:df:9b:36:1b:e9:97:10:e8:cb:88:08:c8:41:fc:
4e:ad:a8:c3:20:1e:bf:ab:f8:c9:29:28:2d:c7:26:71:f2:b9:
92:68:9a:6a:a0:14:0a:f8:02:3e:5b:bc:2c:eb:c2:a2:47:7e:
b2:72:6c:58:58:ee:59:86:4c:6d:01:0a:f9:45:5b:42:f0:c5:
2f:7f:da:e8:74:27:a1:3c:d2:ec:c3:a7:2f:3c:4c:44:6c:29:
f3:39:ab:27:0d:d2:cd:de:00:b7:21:42:c0:2e:c0:95:5f:81:
fa:2f:65:aa:66:4d:03:e2:19:f3:99:95:58:2e:03:66:4f:54:
ee:e7:1b:1c:b4:9a:3f:86:4e:db:bd:5d:e4:2f:02:21:c1:87:
3a:58:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:46 2025 by rpki-client