Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: +AFEDc3cQ77/4rLpOS+B/3mrKaV6RLg/aG6z2fm0gk0=
Subject key identifier: 57:EE:A2:E3:C0:C7:86:65:B0:0A:46:BB:A3:51:CA:2D:0A:63:65:9A
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0198D583571B3923E3B2832B698F7B8AE7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: w+bdblFpSfhy3ROragwf5WkGiUpU4+ucPibq/IPMYfo=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:57:1b:39:23:e3:b2:83:2b:69:8f:7b:8a:e7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=57eea2e3c0c78665b00a46bba351ca2d0a63659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:bf:47:d5:40:64:e5:14:cd:e8:c9:91:4d:
2a:b8:01:ce:be:62:0b:39:18:af:de:b4:4a:19:b0:
6f:e9:4b:60:16:dc:5e:99:64:1e:79:4f:23:81:bf:
fa:a7:eb:e9:9a:dc:3a:cb:81:8d:4f:42:13:0d:b1:
3b:e9:53:57:cf:3d:13:3b:d9:e8:b8:4e:55:3f:56:
a0:96:7d:f3:ac:e6:44:8c:c6:87:32:1b:ad:c0:7e:
4e:7e:a0:64:ef:30:0c:8f:a3:52:9c:96:b3:a8:45:
85:cf:98:7b:3a:62:a6:b3:04:ea:18:0d:a0:1b:3f:
2a:77:3c:d7:10:0c:a0:3b:80:d9:f2:93:6e:7b:41:
77:9e:e5:f7:07:ab:79:c6:72:a3:7e:63:15:ed:af:
56:7d:80:21:53:08:75:86:b9:40:66:7d:42:e6:66:
91:03:cd:43:ad:07:5f:39:bf:f0:08:12:86:d2:da:
ca:f6:f3:89:9a:b0:02:f8:00:28:0f:f5:3c:95:8d:
4c:5c:16:7a:1b:99:1f:e9:16:6e:66:8d:f8:5d:1a:
a4:97:e1:cc:64:86:8c:26:53:0d:1e:7c:0e:e6:55:
ee:46:54:20:03:58:2b:c5:e9:b0:5e:86:93:26:5d:
eb:38:ad:bb:a5:59:24:a2:9b:53:9c:b7:53:1b:85:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EE:A2:E3:C0:C7:86:65:B0:0A:46:BB:A3:51:CA:2D:0A:63:65:9A
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4f:de:40:ab:91:4a:d8:5b:fc:55:05:9f:cd:3b:43:7b:63:
1f:40:2d:56:91:3d:18:77:67:87:c1:5d:89:21:89:41:a4:b0:
a9:9f:6c:62:ac:37:3b:a0:ad:ac:a7:3a:b0:c3:47:18:4d:91:
37:7f:a0:82:33:73:af:0d:c9:6d:dd:0f:13:6e:9d:14:8e:fc:
13:80:3f:c3:df:87:3b:0b:42:0b:bc:b9:f7:2e:e5:74:05:a4:
c3:e7:01:39:19:4d:60:f9:11:6e:b4:88:6b:98:23:c3:c0:fa:
fd:77:6f:4f:50:56:c0:90:ef:eb:45:f0:70:12:0a:07:c6:ef:
cd:53:97:ac:f0:81:74:68:33:57:da:c2:53:eb:b5:f7:40:e3:
67:c3:ec:7c:96:09:b7:bc:bf:7b:f8:b2:4f:dc:56:e9:0f:d6:
5b:27:6f:f1:75:e0:bc:e3:95:2b:b8:21:e6:49:7a:04:a5:02:
34:ec:8d:f2:4b:ef:f2:a0:b0:00:6a:9f:04:76:38:88:a1:74:
d5:c6:0a:99:00:c1:e4:7f:ad:0f:c4:ff:c4:72:01:b0:f5:8a:
e5:20:e0:24:e5:17:47:11:62:8c:27:4a:15:10:e3:1f:55:84:
25:22:3e:75:bc:49:a7:24:4a:b6:85:42:3d:0c:15:4f:1f:1f:
fb:72:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:17 2025 by rpki-client