Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: BYbTW7glWm6X8d79dfUX0GH6TVrFxy5WpzILLduBpwI=
Subject key identifier: AE:1E:87:04:6E:D0:A2:ED:E0:E1:95:B3:A6:96:BF:B9:FF:90:EB:31
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 0198D6613395AB302423C585F0D720570731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 15C1
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: gx+nH1vD5mYUlSnHQuQ49AiIEC89kI1Xls+nFEQfz/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:33:95:ab:30:24:23:c5:85:f0:d7:20:57:07:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=ae1e87046ed0a2ede0e195b3a696bfb9ff90eb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:14:c2:dc:54:37:f5:f4:42:6b:e7:79:1c:
39:6b:de:97:57:7f:62:f4:c2:47:47:7c:1a:9c:6f:
15:87:07:65:47:d9:c9:5d:b3:10:9f:34:05:0c:5c:
64:b0:5c:5c:01:c0:9b:ff:fe:70:46:67:cc:e9:12:
a3:bf:37:cb:29:ec:51:95:1d:76:2e:dd:f6:32:27:
01:cf:21:39:57:d7:be:63:0b:05:bf:ea:58:46:b4:
c2:03:36:c5:bd:fd:a6:de:02:d1:15:0a:c2:82:2d:
83:c3:0a:20:47:e0:93:f5:1a:56:ae:54:27:27:82:
d4:75:16:5a:21:90:71:9f:dc:82:c2:7b:d4:18:71:
9a:ad:14:50:16:8d:86:0f:1e:4c:3e:5e:6a:67:55:
70:b6:85:f1:7f:71:ca:58:99:08:f8:7e:85:e7:8e:
f1:d9:8a:df:60:18:f9:fd:8f:14:0f:6c:97:b0:30:
78:94:12:14:ae:99:3d:8f:d5:83:e6:1b:ca:a3:14:
ef:f8:20:a0:69:74:e9:1f:b2:41:19:00:6d:10:48:
9c:bd:f0:58:55:0a:75:f3:37:18:09:ae:1b:4a:ed:
34:b2:eb:7b:b6:a0:68:c3:85:87:0f:1d:3e:e3:88:
1d:38:65:1c:69:3d:8b:08:1b:7d:84:f5:b0:d6:0b:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:87:04:6E:D0:A2:ED:E0:E1:95:B3:A6:96:BF:B9:FF:90:EB:31
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:46:fd:06:17:9a:1b:a3:8c:ae:69:c5:66:49:af:7f:9f:d9:
fb:8f:bf:a9:c6:c0:3d:b3:31:d1:df:64:9c:f8:c6:c2:f6:3e:
de:83:fd:7d:2c:06:00:44:c2:09:3d:60:b8:37:ce:bf:53:2a:
84:1f:e4:4b:2f:3d:03:cf:43:80:00:62:ab:54:dd:74:be:b7:
1c:7c:7d:13:28:9c:20:7f:f8:b6:a5:f8:78:0c:e7:ed:ec:1d:
5a:7a:fc:9c:dd:ca:16:ba:0e:dd:57:94:ad:19:fe:ab:44:e1:
08:98:d7:73:bc:ee:09:5d:ce:06:02:0c:2d:3c:6e:df:14:63:
1a:5b:73:b7:55:d3:c7:15:69:94:66:6a:de:f9:3a:4e:a8:e8:
17:a4:a2:31:bd:18:c3:b5:9e:84:11:a6:96:9c:13:43:c2:f8:
c1:d4:61:49:d2:68:ae:33:21:ae:59:17:cf:59:4e:9e:37:06:
f1:4b:3f:2d:0a:95:47:cc:68:cf:6b:cb:7f:01:98:01:72:c5:
8b:da:0f:74:71:cd:ac:27:b1:b6:10:9d:94:37:cd:b4:e0:07:
4d:cd:4e:a0:ab:bf:b8:73:fa:5c:5a:b0:f4:97:66:a6:81:19:
b3:5a:0b:ad:d6:a9:9e:42:58:0e:8e:39:b9:d8:3b:e6:26:82:
e3:0b:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:55 2025 by rpki-client