Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: ja7/010AY6R//FGCgBLim1IF2zxOFSvfuSIH1KdzjOE=
Subject key identifier: 2B:C4:6A:04:CA:E2:1D:EA:CB:83:8B:4C:C9:49:73:07:8F:E8:D3:56
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 0198D54E87A0054DD7460C8A1C0D7F54525C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 0F4B
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: pRyc+qxcz092uVTr4QcUHd+OviwYrVjn2pGZQlv5CjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:87:a0:05:4d:d7:46:0c:8a:1c:0d:7f:54:52:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=2bc46a04cae21deacb838b4cc94973078fe8d356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:e2:5c:da:61:32:29:ea:89:9e:c1:27:52:
95:4c:95:e1:ca:6b:ec:2e:7f:9d:9a:f9:49:7c:3c:
cd:69:97:78:ef:59:a3:be:5d:fa:22:2d:0b:f8:73:
8a:3c:82:77:ac:29:ea:7d:af:c5:09:25:c7:ef:c5:
42:8f:7a:ef:1f:bb:67:69:66:1d:e5:51:c9:a8:c2:
29:ca:b0:48:60:2b:93:33:87:3c:6e:3b:96:ec:61:
ea:5d:07:9a:e9:cb:96:ab:2a:0f:07:fd:29:45:ac:
1c:22:ab:c5:6a:42:e7:49:b3:84:fe:e8:af:95:e8:
8f:25:92:fe:fd:1b:63:b0:40:3f:5c:12:33:6b:dc:
c3:ef:df:6a:db:74:2e:a3:b0:fb:52:40:0b:53:56:
43:d8:55:16:b8:df:4d:8e:03:7b:17:8a:09:c1:9a:
eb:3a:d4:db:fa:47:1e:61:45:f9:54:f2:8b:c8:63:
7a:dc:30:b3:f5:fe:4c:41:80:b6:2c:19:2a:69:4b:
29:b7:c4:07:b6:12:36:3c:f9:4d:63:4a:57:d3:91:
09:a4:04:71:35:0b:d9:dc:fc:e3:3e:2c:c4:4a:c7:
57:ce:a9:e1:c3:56:de:2d:bc:16:39:c0:a4:32:3b:
5c:aa:13:34:14:f6:28:d3:c0:0d:92:30:0e:b0:87:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C4:6A:04:CA:E2:1D:EA:CB:83:8B:4C:C9:49:73:07:8F:E8:D3:56
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:e7:21:76:2f:b1:c9:9a:d5:13:d7:9e:2b:64:f0:d9:50:
6a:cc:aa:59:3d:b9:9f:b1:87:6c:a6:f3:54:87:25:7c:72:2b:
84:ec:5c:42:dd:4e:87:4a:f9:c3:79:d1:f5:47:ee:b8:ea:61:
91:1c:68:c2:96:3f:f8:63:6d:4b:dc:d8:76:69:4b:4b:e0:9f:
6e:bb:7a:67:71:7c:38:d9:f9:5f:0b:f0:88:37:d3:f2:9a:f5:
ad:07:71:e2:eb:bc:1e:7d:64:7e:16:c9:8a:75:23:90:4d:98:
2d:d0:81:b9:19:d8:66:3d:f8:a9:6f:0c:0d:8f:8d:e2:a1:9d:
2f:e1:5e:eb:bc:75:77:e0:48:99:5a:3d:b7:cd:01:80:d4:35:
ee:e3:f9:5a:b4:e2:c4:d2:e6:61:15:e2:af:ae:9c:73:4b:b1:
ac:74:b1:4a:ec:4d:ef:53:de:da:8a:8f:59:89:ee:eb:79:8d:
d6:d5:d1:d5:b9:9e:ea:aa:9d:e9:1c:9d:e4:bc:24:da:c0:6b:
3e:3f:91:13:41:b0:db:d8:37:2e:43:5d:2f:4a:98:08:ba:11:
f9:65:a3:d5:de:6d:a0:95:c4:a2:fe:82:21:27:cd:5f:c5:d7:
c6:85:7a:a6:8b:d7:7b:81:ba:14:c4:20:4f:3b:5e:51:be:13:
e4:ae:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:45 2025 by rpki-client