Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: 2OIcA/wubHR1z3/77UvRpy3EA/dtS9AN9smooH36lxE=
Subject key identifier: 8D:49:BE:9A:4F:83:B4:20:CA:E3:D3:00:06:81:6F:5B:3B:C7:B8:3A
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 0198D473AD3C63AEEC01FEB6EC6F2165848E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 06C1
Signing time: Sat 23 Aug 2025 01:03:27 +0000
Manifest this update: Sat 23 Aug 2025 01:03:27 +0000
Manifest next update: Sun 24 Aug 2025 01:03:27 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: 4psea3k3/TtGzsVTcyMwrAisXmXdW9wvUrLnprlsMgc=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ad:3c:63:ae:ec:01:fe:b6:ec:6f:21:65:84:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Aug 23 01:03:27 2025 GMT
Not After : Aug 24 01:03:27 2025 GMT
Subject: CN=8d49be9a4f83b420cae3d30006816f5b3bc7b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:e9:fe:6d:b3:9f:db:5c:9c:e4:3a:f1:8b:
a4:9d:3e:4e:bc:00:8a:48:7f:5a:02:c8:d2:74:ec:
39:e1:33:c3:a1:a8:85:f1:80:72:c7:be:8c:95:cd:
50:08:bc:23:6d:10:3a:48:69:8b:02:b5:47:ee:16:
1f:a2:c4:c3:92:4d:46:36:72:7b:8f:b2:83:1f:f5:
64:f0:a1:22:84:78:17:d9:10:33:fe:11:4f:f3:8a:
02:2d:77:bc:8f:c1:cc:ed:00:78:fb:31:0d:bc:cf:
d5:14:5a:0e:e9:77:4c:5c:b6:f9:3c:10:74:0b:7f:
51:f6:d4:70:31:e6:d0:21:11:4c:ce:ae:b2:19:68:
f4:6b:d5:2b:67:96:c8:9f:9c:69:a4:d1:db:15:40:
15:4f:5a:9b:99:3c:fa:84:54:48:8a:a6:23:5f:d0:
f5:5a:1e:6c:ca:b0:bd:68:3f:80:9a:c0:18:a6:51:
a5:83:40:3f:3d:f7:5b:a4:75:3f:b6:21:3e:88:33:
dc:05:29:55:90:84:aa:71:76:ec:f3:0a:52:a3:1e:
8f:07:ca:42:52:4b:9f:5b:54:fc:45:2e:27:5a:4e:
a8:1e:d7:b1:51:09:34:c0:ee:61:01:d9:3b:f8:be:
e1:bb:bf:e8:2d:66:a8:a4:0c:72:a2:e3:de:77:ee:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:BE:9A:4F:83:B4:20:CA:E3:D3:00:06:81:6F:5B:3B:C7:B8:3A
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ae:0f:73:eb:6e:21:86:6f:11:53:72:4c:60:77:cb:92:04:
b9:34:93:11:69:09:87:6e:df:b6:41:9a:a0:a1:ad:d9:9e:46:
a4:4b:5a:8b:43:6c:83:21:57:9d:10:0f:94:3d:15:e7:a5:00:
c3:24:5c:c9:83:18:93:8b:33:cf:39:fb:57:df:1b:ff:dc:3c:
7b:c3:c9:23:8c:21:42:e3:22:91:26:db:3e:92:6f:16:6a:0a:
7e:9c:20:2d:7b:29:99:1c:63:a3:83:bd:1c:43:2b:9a:f0:58:
14:2a:d6:c4:47:94:8b:71:16:b2:60:41:e2:c5:3b:34:a8:30:
c9:19:e4:1a:e5:6c:f3:a6:8f:be:9b:bf:9c:98:80:21:9a:90:
b5:01:dd:6a:1f:67:34:df:68:ff:dc:70:8a:cd:b0:1d:24:60:
36:38:e2:76:bc:c8:a5:aa:6e:5a:93:b3:6c:06:a8:d3:e5:63:
9d:4d:b5:9a:ed:0d:c7:9f:b6:45:0d:45:ea:6e:b8:15:4e:b4:
35:59:30:7f:bc:99:54:35:7c:5b:b2:af:ce:3e:c8:e0:34:5c:
e9:5c:1d:d6:2f:dc:c0:39:7a:d3:4b:a6:af:5e:2b:2d:c1:50:
4d:54:31:40:f0:19:3e:7b:da:3a:46:c4:59:b6:18:cb:ce:90:
00:e2:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:08 2025 by rpki-client