Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: JbzQgiFH/BlFWuXnH/6xep+v93XPpzNHu9ytG4G8V+4=
Subject key identifier: 32:FC:4C:AC:13:C7:0F:B0:6C:C8:59:F4:69:76:6C:05:DA:FA:F9:2D
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 0198D5F19BFF4B289A37EAAC6F9F9E20A1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0561
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: syYZOjRpGrJCOhvOHjnQ1fwwdJNbA7nR5NL6wGlI45w=)
2: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (hash: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9b:ff:4b:28:9a:37:ea:ac:6f:9f:9e:20:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=32fc4cac13c70fb06cc859f469766c05dafaf92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:4b:93:79:8a:4f:c6:71:36:f7:2d:2b:d5:
15:66:bb:bd:d0:a5:73:04:42:49:3b:49:a7:59:b7:
4c:00:47:6d:66:ba:0a:65:04:85:5b:76:5f:fa:a0:
84:58:1c:2d:ed:ec:37:36:12:59:a8:12:3d:3b:2d:
7b:db:a9:33:15:2b:8e:a5:8d:9f:51:ad:79:95:8d:
fe:28:b9:c3:43:5d:3d:69:5e:b3:f0:26:8e:3f:26:
91:75:79:77:f2:83:50:21:e6:67:97:94:a2:f7:37:
97:ea:69:7a:62:0b:67:4d:c1:8f:2d:56:02:ec:32:
80:c0:76:f4:aa:56:85:9b:72:40:de:90:6e:6d:60:
5c:51:56:5d:fb:c5:fc:0c:e2:ea:81:ff:83:bd:28:
16:34:0f:d6:a6:d4:a6:b9:ca:2d:14:5f:5e:de:0a:
83:02:9d:54:c8:a0:b5:46:6e:7f:83:5d:8e:7e:2f:
cd:44:82:1b:77:94:9a:ca:67:fd:1f:82:83:57:f5:
d5:3d:a0:6d:cd:2f:3e:be:18:82:26:05:d2:12:4c:
e7:29:d0:40:66:4c:40:9f:85:fa:b7:cd:7c:f9:37:
1d:9d:73:83:4b:d0:a3:c9:c1:9e:d6:bd:85:7e:69:
15:23:60:72:c1:d5:a8:5b:30:b3:36:a5:09:9f:8a:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:4C:AC:13:C7:0F:B0:6C:C8:59:F4:69:76:6C:05:DA:FA:F9:2D
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c5:4d:08:d1:eb:a0:b3:cb:72:f4:e6:f6:ee:48:f5:19:15:
cc:13:42:85:3a:c8:b4:3f:94:7d:6d:ec:74:ef:e8:93:c1:10:
d8:84:c2:a8:0d:56:b9:02:fb:4a:11:c8:de:f0:f0:bd:1f:cc:
bf:02:fb:7d:44:e8:46:b3:0a:29:9c:68:75:68:99:9e:6a:7c:
24:3d:bb:aa:e1:0a:fb:d9:6f:5c:a5:48:70:68:be:17:3e:bd:
f5:94:cd:cf:6a:7b:8b:86:7b:2d:5a:42:57:cc:d5:77:7c:91:
c9:96:f5:e9:af:51:b7:83:50:13:cb:81:2c:de:42:5e:f1:e9:
23:5f:6b:bc:4e:63:f1:86:88:49:60:50:02:7d:8e:41:9d:7c:
b6:42:3c:43:5f:68:77:ce:85:af:0c:9f:3f:33:dc:c3:78:2a:
c8:30:43:50:b8:10:69:c3:da:3e:7e:ba:7c:03:78:01:70:9a:
96:88:ad:eb:5e:69:03:1c:c8:b0:5b:6b:97:4d:b2:40:87:bf:
8d:a4:51:e7:89:74:5b:05:24:00:13:4d:d3:36:29:70:79:94:
63:d3:ae:e0:66:bb:73:bb:34:10:99:ac:0c:8f:e2:1a:e3:0e:
eb:ee:df:8e:2f:1d:eb:d1:45:e6:ff:da:f3:fa:94:5c:11:31:
7d:22:21:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:34 2025 by rpki-client