Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: LzjQg+U5XBuTRgsQ7ZSuSpgsfYMbNnpCOcECDjoFq/U=
Subject key identifier: CD:C5:A5:5E:75:BE:7D:AB:C5:4E:66:57:60:C0:A5:E5:57:83:11:C8
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 0198D58346C40CC2BE9A0DC2EDE29CF1AF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 06:00:06 +0000
Manifest this update: Sat 23 Aug 2025 06:00:06 +0000
Manifest next update: Sun 24 Aug 2025 06:00:06 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: XdeYS2sGMgzgj3Uxjdmm/1WQLHt5Z+3QH8wMgnj4jUc=)
2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:46:c4:0c:c2:be:9a:0d:c2:ed:e2:9c:f1:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Aug 23 06:00:06 2025 GMT
Not After : Aug 24 06:00:06 2025 GMT
Subject: CN=cdc5a55e75be7dabc54e665760c0a5e5578311c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:ad:40:8e:fc:1c:c0:35:70:7e:0b:cc:f9:
4a:87:02:c5:57:17:b4:ff:80:c7:81:13:6b:5b:5b:
00:fe:e2:f9:04:77:39:30:d8:e1:c0:f8:a8:81:43:
d8:c5:07:98:a4:c3:6e:0e:c7:86:98:1e:8a:50:0d:
2e:c2:38:44:d0:fb:c2:7e:ac:b5:44:52:c0:ee:d2:
61:75:76:22:cd:df:e0:2e:1f:79:95:8a:f1:f3:cc:
d9:71:6f:26:35:3d:d6:13:1f:91:91:d1:8a:3b:ff:
69:ee:9c:6a:a5:50:ce:a8:56:14:e6:ac:67:8e:38:
bf:b6:d6:1a:ba:11:d5:47:02:90:5a:52:17:f9:f4:
dc:d0:a5:05:46:af:c2:e1:17:48:85:a8:b3:85:7c:
de:49:05:9b:53:5b:96:b7:e0:e0:03:92:ef:f4:43:
be:d3:d6:d5:2f:cb:91:e3:66:14:8f:83:70:cf:4d:
a3:cd:b5:01:1a:d7:89:af:26:1c:49:59:23:6b:1a:
0e:ab:8b:66:ec:51:70:37:7d:d6:42:35:e0:74:91:
66:fc:7a:25:50:a6:8c:5d:f6:62:60:31:86:03:57:
cf:11:d3:92:0f:fd:1c:7d:0b:b4:4c:d1:3f:3e:a4:
7a:3f:43:0c:c4:26:30:9f:fc:a2:f0:7c:b7:47:35:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:A5:5E:75:BE:7D:AB:C5:4E:66:57:60:C0:A5:E5:57:83:11:C8
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:be:18:8b:fb:dc:57:28:d3:d2:a3:15:40:52:f9:51:5b:8a:
93:c3:cf:81:70:25:c4:b7:06:86:d8:60:49:45:bd:56:10:3d:
3c:d2:25:70:13:df:f1:21:3a:32:63:ae:1a:0d:18:0f:2b:6b:
41:b7:27:63:c1:a2:b8:c4:1a:8d:2c:49:18:f2:5e:12:73:7a:
83:89:df:dd:98:61:b5:cb:88:d4:f2:6e:7c:20:c0:81:3b:43:
95:54:b7:87:51:da:9d:86:fb:80:a7:d1:6d:68:7e:ad:99:93:
60:98:68:57:8d:24:4f:b7:e2:c8:06:56:05:8f:d7:57:b5:5f:
4c:be:0d:0a:6b:1d:7e:56:86:c7:06:e8:ce:8c:9d:e2:ff:ef:
38:c4:23:6b:2c:34:93:67:78:d6:81:f8:d9:a3:3f:41:c5:48:
ab:c8:3d:0c:c4:8b:bd:87:8f:83:7f:0f:bf:84:08:02:2c:21:
52:c9:f5:15:f1:92:61:73:7a:08:8c:25:f7:d4:24:c8:6f:0f:
4d:2e:7c:1a:42:47:40:e3:ad:ad:45:aa:2d:4e:1e:39:bb:11:
ac:6b:f8:05:07:4e:8b:08:8d:64:07:64:b0:07:2b:76:6e:22:
0f:32:43:99:1a:f9:49:6a:e6:89:93:30:1d:85:c0:5c:56:6d:
51:82:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:45 2025 by rpki-client