Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: sdBH63hzHQHMFA2UfiE7N+nuD5LQxeUdv8N5rUL/pEk=
Subject key identifier: 30:50:CB:69:9F:91:26:37:59:83:17:54:84:07:C6:30:B4:27:0F:29
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 0198D7738D2D723DF13E8E66E9742539F6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 15:02:10 +0000
Manifest this update: Sat 23 Aug 2025 15:02:10 +0000
Manifest next update: Sun 24 Aug 2025 15:02:10 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: aIdQl0+8ZoHO79mEAnkllIdqrN9rtKHqZ1+NtT/fXYc=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:8d:2d:72:3d:f1:3e:8e:66:e9:74:25:39:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Aug 23 15:02:10 2025 GMT
Not After : Aug 24 15:02:10 2025 GMT
Subject: CN=3050cb699f912637598317548407c630b4270f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:0e:0b:b4:3f:a8:72:d0:c5:04:b5:d3:85:
c6:1a:1d:bf:f7:c6:b1:ff:0f:87:c4:cd:25:ce:d3:
7b:9a:94:9c:c3:b8:38:e7:96:24:3a:e6:44:1e:89:
0e:a5:ef:6c:70:61:46:09:36:a4:72:69:14:4b:a4:
35:cd:bd:fe:8b:65:cb:a8:e7:45:a5:4d:e9:8b:45:
03:22:e1:54:27:0d:4b:0b:fd:f9:0d:d0:fb:b6:e5:
dd:7d:c7:29:b8:97:ca:d4:af:2d:d1:ea:f1:1f:36:
6d:fe:57:39:aa:ac:45:03:ef:7f:75:17:46:c6:52:
45:14:40:99:e2:1e:1c:6e:4d:00:1e:f6:6e:64:b3:
18:c1:0c:4a:73:29:8d:6b:80:d3:e9:50:58:a0:c2:
e6:77:8d:82:35:ce:73:7a:77:22:31:84:83:4c:96:
5d:a8:1b:cf:df:04:d2:56:33:24:aa:4e:8a:42:8d:
46:3a:9d:16:d9:a4:5b:0d:ac:17:d0:f3:94:7c:98:
1c:52:b1:71:b1:e5:ff:12:ab:47:e8:76:a2:8b:db:
74:1c:dc:65:d2:80:82:1b:9a:a1:61:85:4b:70:33:
ec:af:5f:f6:2c:03:67:d9:92:a7:a1:61:b1:f1:df:
ee:2b:16:5f:16:e7:08:55:d7:94:d1:17:70:59:54:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:CB:69:9F:91:26:37:59:83:17:54:84:07:C6:30:B4:27:0F:29
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d8:e7:d4:1e:d1:5e:5c:5b:fc:ec:f0:b9:22:bf:1e:b1:82:
2b:76:8f:7b:57:24:71:ef:02:88:e4:f6:bc:96:40:71:df:56:
92:3e:a4:d5:92:e0:46:f8:92:b9:d0:19:21:2c:f7:ee:9c:ca:
87:86:e2:a8:b2:c8:9a:fa:93:0d:58:4f:27:3d:55:65:b0:55:
a4:1b:74:8a:ec:c1:57:e5:3a:ae:e8:ee:61:9c:5d:f5:bb:b7:
32:80:1b:88:d0:49:b1:22:6e:8f:22:6a:cb:84:28:0c:d4:9e:
0f:48:50:c5:3c:79:b1:03:c5:ba:82:67:f5:5a:b2:a9:7c:ef:
21:69:6e:8a:69:fd:26:d3:98:98:47:7e:1e:b7:40:8d:ae:69:
46:a5:aa:66:10:f4:3a:42:7e:19:23:7c:cb:58:aa:f8:1e:54:
d3:7c:9d:d6:77:89:81:d3:56:a5:e6:33:02:dc:ce:2c:82:10:
ea:2e:94:ea:78:87:01:5d:56:53:6c:c7:22:e7:56:20:b5:d5:
56:1f:04:21:4c:c3:c5:2a:74:a5:ce:46:7f:7a:ac:2d:21:4f:
9b:f8:a0:01:ea:4a:e8:5a:5c:17:f9:dc:29:49:1b:c1:59:84:
ef:41:41:3c:31:6e:35:c0:98:50:08:27:ae:63:40:45:3d:4d:
57:7e:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:56 2025 by rpki-client