Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: +yp9qPI29czf1QEipj2B0LaGCf9Wx8bK4d1L+rlEqQo=
Subject key identifier: DD:F4:C7:C6:47:B8:1B:52:DC:BB:19:61:5B:28:2C:81:77:07:42:FB
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 0198D69814DDD362CCAB740D7EC7CE490E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 02F2
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: 9Wf2Yhmn+pCMmaAggP7giBE26bH1geTT0YzI5UM0gS8=)
2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:14:dd:d3:62:cc:ab:74:0d:7e:c7:ce:49:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=ddf4c7c647b81b52dcbb19615b282c81770742fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:59:25:8c:7e:f7:53:8a:f0:ae:9f:61:98:
ff:44:9c:96:b9:03:0f:fd:99:ea:b9:dd:db:2f:f6:
36:46:22:19:5d:8f:2e:13:38:1f:23:e3:90:22:72:
32:f3:ca:5d:2d:9f:1f:11:24:a1:f7:e7:6a:72:7e:
11:1f:a9:1e:6b:b3:9c:26:ad:2d:f5:c4:52:c2:37:
54:d1:f1:ea:b1:75:21:22:d7:34:2a:5d:4b:a2:d9:
ab:6b:7a:43:36:dc:2f:ac:88:02:3d:5d:96:2c:e4:
2c:b4:da:6c:7e:64:7f:60:29:42:40:78:3e:8e:3e:
1f:2b:87:81:4b:b1:03:8d:c4:06:74:1b:cf:43:df:
2c:5c:3d:97:5d:cb:d0:36:e7:13:8e:72:5a:48:71:
5a:c1:6a:83:e4:e8:d4:99:c4:09:9f:b5:5f:02:27:
a2:ca:c6:6d:4f:0c:84:08:66:fa:b1:64:bc:96:3a:
cf:f7:d5:97:69:e8:01:1f:7b:2f:cd:cd:4d:36:2a:
95:3d:cd:b7:c5:c8:05:65:27:68:6a:f3:95:0f:67:
ce:b3:1a:55:b9:49:4a:30:96:ec:93:5c:59:9d:2f:
78:19:18:40:d2:41:a2:46:73:09:02:7c:6c:dc:d8:
4a:e2:fa:1b:4b:4c:8f:9e:5e:60:a9:83:7a:27:d8:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:C7:C6:47:B8:1B:52:DC:BB:19:61:5B:28:2C:81:77:07:42:FB
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:61:e0:c4:61:13:19:84:1a:22:cd:e2:5d:fd:ea:e9:d8:
ee:e9:3e:f7:69:89:97:bc:55:f9:7c:65:77:c1:c3:cd:8b:21:
4a:3f:04:1c:bd:64:80:50:0b:85:f2:4b:ab:62:9f:ec:4a:8f:
70:55:d1:4d:ec:ab:27:23:2f:d0:7d:94:b7:21:31:29:df:8e:
a7:a1:c4:c9:c5:0d:d7:05:d5:a9:1f:87:d3:b7:17:b6:53:05:
6c:dc:77:52:b1:6b:f0:90:4d:e1:7a:db:1c:c4:22:d4:91:7b:
1d:35:42:74:6a:c2:da:41:7b:ee:8a:1e:b1:4d:81:c0:40:4d:
12:73:02:e9:89:a3:7d:14:d6:84:55:3e:0a:a5:1f:c4:5d:01:
85:95:53:40:58:ac:8f:ad:87:c6:9a:b7:9d:76:6a:15:93:08:
7a:97:b7:08:c1:d6:1d:ab:2c:23:a0:2f:a2:15:84:cf:cc:c1:
9f:e1:b5:e8:c7:76:ce:a5:43:74:7a:71:04:ad:2a:f6:8d:33:
f9:ec:c1:75:4c:4a:75:85:fc:df:f0:26:d3:92:cc:fa:52:72:
53:0f:8a:26:9a:0e:0d:d2:ed:88:55:3a:35:e5:77:7b:2a:50:
4f:fb:4a:d7:28:be:42:41:e2:f7:3a:fd:ef:ec:a8:b7:aa:db:
ee:9f:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:45 2025 by rpki-client