Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: hqc2KhJng4qlZh7CRSA9XwUwzunAS8X9pmtBwvRWFa4=
Subject key identifier: 9C:ED:17:46:8C:2A:C3:5C:5E:77:19:47:BB:FC:1F:AC:81:EC:EA:72
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 0198D660993F743CE09452B1F5665289637B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: f09e9gCiAyW6GGiaE8buFuwSaeD6tzewbdctoFZYrw8=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:99:3f:74:3c:e0:94:52:b1:f5:66:52:89:63:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=9ced17468c2ac35c5e771947bbfc1fac81ecea72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:de:9d:c1:80:da:aa:2f:54:18:3d:25:80:32:
55:72:22:19:06:1a:22:01:0f:fe:15:1e:f9:a1:09:
b1:92:43:55:a9:07:af:68:cf:a4:a8:96:2f:9c:0d:
35:58:82:74:fd:47:85:d2:02:e3:1e:61:8a:16:c2:
e9:b4:83:89:2d:ae:60:5a:f9:6f:02:9a:0b:49:a3:
58:1f:a8:36:c5:e2:88:bf:1c:0b:42:57:57:6a:1d:
63:40:bc:af:06:08:23:e6:4b:0e:88:5a:9d:f5:36:
4b:55:f1:13:8a:b1:8c:da:7b:71:44:96:6f:07:c1:
5c:2e:e6:6c:97:88:0b:32:b1:39:ef:cf:83:88:2d:
2b:25:ac:7b:9c:f2:29:ea:b3:82:c3:95:ce:a4:95:
f3:25:1d:f1:8f:03:ef:59:a2:fe:48:05:ba:07:88:
75:3b:75:c5:3e:0b:a0:97:61:bc:51:ae:95:e2:e1:
80:1d:56:75:c9:de:84:b5:69:ca:44:c4:6f:5d:cb:
f5:ca:d6:6c:c9:c8:c1:69:0d:c1:f6:e7:89:ad:cb:
75:c4:f4:97:9a:b7:2a:fa:80:4b:93:bc:28:db:9b:
de:8c:68:e6:45:66:18:15:f8:e2:b0:60:20:9a:f0:
32:93:48:39:84:34:c5:42:94:e9:10:85:0b:08:ff:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:ED:17:46:8C:2A:C3:5C:5E:77:19:47:BB:FC:1F:AC:81:EC:EA:72
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5c:93:02:f4:3e:a8:63:d9:18:f9:27:2d:15:0d:10:fa:7e:
02:9d:b8:6e:a0:7c:83:8b:a9:f7:a6:e5:93:2f:0f:ea:42:0d:
8c:55:f9:e9:a0:74:98:57:c9:be:a3:fc:65:5f:1b:40:17:56:
8d:5e:88:23:30:e1:40:f7:e0:28:fc:6d:21:15:ac:97:a0:0b:
90:f4:cc:9d:9d:95:a4:a5:20:3f:b3:37:ba:74:26:8f:e2:3f:
6c:a5:d4:a4:d6:a8:78:f3:fa:72:04:6f:b3:aa:25:73:b8:27:
c2:4b:9e:59:99:1b:8f:7b:e9:10:9b:49:bf:29:75:f5:c6:8e:
db:fe:ce:86:0a:14:0a:bd:3b:3f:18:5b:d1:06:e1:80:cb:ee:
0c:4f:b1:3e:9e:be:b6:8e:29:f2:ce:50:91:d7:4b:48:92:6c:
08:c6:48:e2:d2:3d:3d:8b:3e:27:5a:6d:06:58:dd:c6:87:61:
8b:5c:7a:56:f3:4f:ab:0a:36:a1:70:5b:86:31:37:18:62:19:
b7:f3:7c:28:e8:4c:02:35:bc:fd:ab:e5:8c:9e:de:b0:16:59:
a6:52:16:be:a1:70:da:61:5e:62:21:31:ad:14:89:53:d1:16:
e5:3a:da:4a:ef:f6:ee:89:be:b2:a4:d4:fb:0f:c0:ae:7a:78:
e4:89:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:59 2025 by rpki-client