Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: goVDzl8Nz0XnzsocEWcjvEknwWd49t6SbrFAeqKOYSs=
Subject key identifier: 40:34:46:7F:24:D0:00:47:78:AE:AD:86:57:62:34:06:58:A0:25:E9
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 0198D698166E74F972EADCA5DA33803FE8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 01ED
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: gRjSJ6URNqU5ArV2quinhOeq+KqzA/ATo0ZetNXSvGE=)
2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=)
3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:16:6e:74:f9:72:ea:dc:a5:da:33:80:3f:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=4034467f24d0004778aead865762340658a025e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:b4:cb:d7:65:bf:15:ef:e1:bf:b2:fb:82:
25:24:87:55:6c:9a:be:98:99:8b:70:f7:1c:f1:99:
3a:1e:9c:03:49:61:5c:df:3b:17:49:46:53:bd:86:
8e:78:a9:57:8d:f2:a9:28:5d:39:75:32:fb:0f:6b:
45:9e:80:aa:64:20:0d:32:b2:5f:f3:62:ec:d8:8e:
51:52:ff:95:67:d4:30:26:3f:61:cf:5b:24:07:f6:
57:e5:7e:31:af:62:5a:27:8b:63:4f:22:bb:6c:b3:
a9:39:ac:c7:7f:3d:9d:6e:e3:94:b6:9f:86:8c:a5:
5a:db:16:cd:13:c6:69:29:66:58:e1:00:54:49:73:
bb:31:3c:ea:18:e3:c9:10:d3:b8:89:d5:27:6e:fa:
d9:11:4c:a3:56:a4:3a:93:10:20:a9:8c:5b:e4:be:
f5:e9:c0:ef:c6:1a:7a:82:16:e1:46:f1:a7:3d:b6:
21:6e:9a:85:2f:fb:d2:ae:e1:ba:2a:2a:be:6e:0c:
01:c7:dd:7b:81:7c:57:56:18:6e:7f:98:79:aa:93:
5d:98:42:d6:3a:85:1e:3b:d0:c8:3e:a5:ea:e9:d0:
38:b9:a8:2d:e7:4c:05:11:3f:e1:6e:e4:7a:10:dd:
a9:90:0b:4f:52:25:d4:b1:a7:1d:4a:fa:5c:19:63:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:34:46:7F:24:D0:00:47:78:AE:AD:86:57:62:34:06:58:A0:25:E9
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:94:dd:c1:d1:5e:91:45:f5:55:9e:3a:02:f2:d1:3e:d4:e5:
70:a1:73:4c:ab:9d:cb:96:06:05:cb:25:9e:17:99:74:97:40:
ba:c4:20:de:20:b9:b7:a7:6a:8c:45:aa:d7:e8:e4:67:5c:e1:
b9:d7:e1:6e:4c:99:fb:28:f3:26:d4:c2:ad:e1:6c:e3:e1:33:
39:10:4e:8e:7c:c6:13:78:c3:32:f7:04:64:31:9a:af:e1:74:
e9:18:a9:5c:26:c3:8f:08:6e:66:cc:3f:6b:37:7e:29:e6:0f:
66:c3:5a:3a:70:e0:c9:20:34:6d:8d:2b:1d:55:b0:e2:b8:97:
40:44:b2:8d:3a:9c:d3:51:bc:6a:bc:02:d4:f6:ea:d2:2c:13:
84:c1:3d:35:44:f8:b1:09:d0:a8:38:08:ea:a2:e4:1b:dc:e1:
14:0d:ff:6c:a1:f2:2e:23:d2:b4:10:2b:62:19:25:28:f8:d2:
64:cd:5c:f4:8a:e4:2e:06:92:b2:a2:2c:12:3e:68:60:29:8e:
20:c3:27:d1:d8:04:78:a3:4a:d2:40:7a:9e:5d:1b:a9:a6:46:
19:92:b4:8c:03:a5:72:fb:a7:d2:94:86:04:ea:90:44:bb:01:
f1:bb:ee:cc:ba:71:70:ac:d1:14:b2:c4:bc:36:32:25:a2:03:
b9:88:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:29 2025 by rpki-client