Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: PmlFdOEtEqxTiitkj19FmO/08MM+rJhz7NwJMW7qqYY=
Subject key identifier: C9:73:8A:B8:6F:02:F9:BB:DA:70:64:36:C4:B6:5F:13:67:55:98:B8
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 0198D5160D063B6B7FB14D5241514565C5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 0412
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: h/sPkmwrk5JPzwczJQNbIb1QFLwIxsRykrBcvnUzBzk=)
2: sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa (hash: vP2EAWCKtEv68Ix4O5DKWgGMPVW5lFga8QKrSKSQB2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0d:06:3b:6b:7f:b1:4d:52:41:51:45:65:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=c9738ab86f02f9bbda706436c4b65f13675598b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:87:ff:c7:31:c8:b6:51:7a:a8:d4:26:3a:
c7:66:57:0e:58:ce:dd:ab:f3:5f:87:ca:5d:e5:15:
63:0a:72:e3:48:a7:85:da:08:95:94:6f:aa:8c:0e:
00:d4:f8:10:df:04:a2:50:fc:89:fd:1d:f0:3e:a8:
32:ec:77:7d:81:9c:f1:fd:1c:23:a3:6f:1e:91:b6:
94:b0:17:11:3a:cc:e2:37:1e:e8:97:87:3b:cc:93:
8f:b2:a9:68:32:38:36:ff:c8:2b:cd:a2:35:b6:d6:
6a:0d:8b:d3:9c:d4:84:96:d2:9c:1e:80:e1:0b:1c:
61:1f:28:59:4d:97:2f:80:20:e8:dd:a8:96:32:ce:
e0:08:ab:a1:f6:8f:ce:d9:cb:8a:28:e0:8d:e7:a3:
cd:d4:2d:48:26:ed:60:4d:08:98:6e:23:71:60:69:
d0:e1:38:54:47:e9:29:b4:86:74:39:dd:8c:d2:50:
17:4f:a2:e8:01:65:36:33:f5:d0:ac:1b:68:3d:94:
3a:ab:46:44:bd:dd:8f:97:f6:90:07:48:9a:1d:e7:
dd:a1:ce:15:b7:a0:5c:ae:48:ab:48:0b:4b:9a:25:
3c:0d:9c:5f:80:b9:7a:9d:4d:5c:22:ab:46:74:9b:
9b:82:d0:d0:cf:52:3c:c8:33:b5:34:1a:6e:72:71:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:8A:B8:6F:02:F9:BB:DA:70:64:36:C4:B6:5F:13:67:55:98:B8
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3e:cd:f7:37:ee:ce:ec:66:77:ed:5e:41:27:31:f8:fb:ec:
74:48:2b:59:2d:51:b1:80:eb:94:94:6c:2f:cd:06:3e:fb:70:
8d:a6:9a:b9:87:b0:58:f8:78:36:df:7b:86:5b:fd:c2:26:2a:
5b:18:3c:1a:84:18:39:98:bb:b1:5f:3c:0a:b7:2b:a7:3b:f9:
4d:e6:69:81:7a:e9:45:49:69:de:2b:ef:6c:72:ea:41:dc:42:
86:06:e1:aa:14:1d:06:d8:03:10:9c:42:1c:19:c1:08:05:b8:
4e:44:be:60:b3:cb:ae:6f:ad:66:fd:11:9b:db:c8:ea:81:5e:
f1:d8:c5:e0:fb:5a:40:47:62:70:98:ec:9c:13:f2:ed:2c:0b:
79:26:7f:2b:84:fa:92:20:aa:78:5a:d7:fd:87:20:08:0e:a3:
15:52:71:15:ea:72:74:b5:11:ce:96:54:b6:39:e7:ff:25:ab:
b6:75:97:bb:d4:25:c8:36:4a:96:11:24:75:c2:dd:c5:b1:39:
f7:da:e0:cf:28:4e:52:4d:16:36:f7:7c:d2:98:b8:7b:dc:e8:
c3:07:c4:42:2a:69:4c:09:63:00:f5:6e:ae:16:d7:ac:50:ad:
d2:b8:b1:47:53:aa:70:73:e1:b8:1c:f4:d9:a6:5f:7e:34:ee:
56:72:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:01 2025 by rpki-client