Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: FHrJWP4Dsyk8gl0zewxzHBH+C1ccS0DmLQpqJR2H/Z8=
Subject key identifier: 27:18:E7:FC:0C:D3:2A:E9:55:EF:E3:80:E8:D8:69:FA:9C:FD:A7:43
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 0198D5F17DDC52D5FF61F0A02CAEC38E94EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: GwB6/zqG6vyzqGrlzYEIM3ynUbF15ah60+KvMi31e5o=)
2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7d:dc:52:d5:ff:61:f0:a0:2c:ae:c3:8e:94:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=2718e7fc0cd32ae955efe380e8d869fa9cfda743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:93:1b:f4:0c:8f:17:c2:af:09:6b:c2:e8:
6e:b2:1d:48:16:6f:09:3f:d7:a7:9c:2f:04:22:dc:
fe:c1:bd:f0:23:6b:ee:4c:92:bd:8a:b0:4c:94:92:
fa:6c:f2:b4:83:9f:df:88:89:12:8b:b7:09:0e:2b:
97:11:a6:6a:21:fd:69:3d:27:33:b4:2d:cc:0a:69:
ce:b8:e7:06:a2:05:bd:bc:95:87:e0:31:5d:fb:ad:
6f:89:f2:fd:02:27:36:89:01:11:92:10:f3:ae:19:
ea:23:c8:b5:f8:fb:e2:19:6a:5f:7c:77:1f:9e:df:
48:c4:f9:37:be:7a:a5:5f:01:28:b7:73:0f:3c:af:
85:f5:5b:2d:b3:20:b9:c8:60:d9:cf:79:f6:4d:34:
9a:65:5b:4e:1c:8d:4e:3e:96:9d:83:07:e1:b3:57:
b1:7a:58:d4:9b:c7:49:07:4e:0a:bb:35:6c:2c:29:
55:59:cb:70:57:8b:7b:ac:3b:61:02:87:e0:6b:7f:
8a:62:35:0d:78:7f:d1:e3:ac:dd:a2:b9:34:18:69:
61:33:81:16:3f:6d:d6:43:6c:61:76:3c:90:59:d1:
b7:55:b4:b0:f8:5d:29:8d:d7:38:15:2e:84:a3:bc:
23:25:14:fc:9d:24:05:85:62:08:09:56:3f:38:c2:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:E7:FC:0C:D3:2A:E9:55:EF:E3:80:E8:D8:69:FA:9C:FD:A7:43
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:54:3d:1a:d8:23:ca:5a:52:d8:7d:d5:a8:0d:d9:f9:2c:00:
4d:07:2d:61:96:3b:a9:3e:1f:0b:74:b2:1c:07:83:b5:f7:ef:
05:3c:23:c7:d2:49:7b:06:51:0a:c6:27:f7:08:1c:b5:ba:0b:
ca:a4:a4:76:7c:28:32:a0:c1:c7:3e:16:c5:89:1e:76:00:0a:
cd:6c:2d:65:0a:d9:a3:dd:5b:67:fc:ff:93:ea:b8:0b:bb:1f:
c7:b1:7a:b8:09:3d:fc:24:97:d6:df:46:d1:47:b7:16:d0:cb:
9e:3c:61:e9:6a:33:74:37:81:ee:06:35:4a:91:3c:9b:11:4f:
66:26:23:f1:f4:6c:58:2a:99:16:2e:d3:bb:2f:48:8a:87:45:
05:79:71:c5:1e:14:8e:74:ca:03:7f:76:9f:d2:6e:b2:fa:a1:
c1:e2:ce:a5:82:a3:53:3e:63:be:f0:cf:03:1d:ff:d0:58:45:
c1:2d:8b:9b:84:fb:bd:30:48:31:e6:2b:52:c1:d6:52:66:12:
7d:53:44:49:0e:f1:dd:09:0d:f9:29:7b:43:e0:e2:d3:42:71:
8d:b8:7e:19:da:4a:f8:f6:70:0a:5e:4a:5d:3b:8a:18:bb:41:
d6:16:67:e7:c3:d7:9c:da:c6:2a:3b:e6:cb:59:11:21:2d:16:
34:2f:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:18 2025 by rpki-client