Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: NBwuWL6IJyJy6HPQUMGtE/iMuz2wxkFLRmE0xQ6k1WQ=
Subject key identifier: 65:4C:4D:FF:91:5E:1C:9D:99:9B:67:6C:73:CC:4F:27:4E:2A:21:BB
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 0198D698131A45986F538A8C240EB4F37713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: NxHejN4XSkMwx73JrPCClxw9owBtBqMvljLH/RbDs/s=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:13:1a:45:98:6f:53:8a:8c:24:0e:b4:f3:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=654c4dff915e1c9d999b676c73cc4f274e2a21bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:37:fa:d7:7a:f6:6e:82:ca:bc:68:a1:49:dd:
13:03:4a:06:3d:9c:96:c7:46:63:b6:d5:ab:2a:d8:
ef:2a:36:81:91:0a:c1:23:89:32:ea:f9:3d:55:25:
ae:60:fe:f9:ee:89:55:89:7f:c9:22:f7:0e:4c:d3:
2e:72:2f:7b:f4:76:77:3a:f8:2a:c9:33:b1:50:0e:
8d:d4:e5:b7:e7:a8:e7:75:7e:87:fb:11:d7:8f:59:
c5:eb:3e:b3:20:0c:f1:96:17:ec:a2:9d:5f:13:01:
dd:cb:fa:c8:b6:86:3d:01:d6:9a:89:55:f3:44:19:
fe:10:0a:e2:28:ab:82:c3:e5:37:13:d6:d4:d3:ca:
ac:9b:97:64:06:9f:de:35:ef:fa:70:c7:4e:4f:07:
a3:ba:59:13:8c:db:8e:b1:46:a7:29:02:c5:4a:98:
80:02:52:c8:b5:b5:f9:bc:0f:bd:2e:a1:25:38:9f:
32:bd:c6:bd:95:c4:f9:41:23:a5:83:6d:ca:23:ab:
e2:c4:ab:22:1a:24:39:7c:4a:0d:c6:c8:72:7b:71:
ba:5e:a1:87:36:26:43:83:16:a7:0c:be:91:d2:29:
c2:61:e4:72:00:93:5c:84:50:ac:24:47:9d:59:51:
96:24:a9:2b:81:b6:f0:9a:a6:90:40:b8:16:bc:ff:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4C:4D:FF:91:5E:1C:9D:99:9B:67:6C:73:CC:4F:27:4E:2A:21:BB
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:75:ae:4e:cd:15:68:2c:74:0d:10:15:85:7d:b7:0d:37:88:
c5:b3:b1:86:bc:bc:4a:ee:f4:d1:00:85:7d:99:41:b8:1b:06:
d7:bc:42:3a:f7:d0:c7:ae:28:b6:39:01:3b:11:a7:6f:70:41:
04:a8:04:9f:53:9d:f2:bf:04:02:d2:ac:80:2a:30:0f:e7:96:
99:99:22:8f:fd:f0:e5:cc:7e:77:39:c1:3a:7e:19:de:82:5d:
52:75:88:c3:b5:6e:e7:32:8c:48:a6:12:9f:4d:25:a9:ba:d8:
f6:34:35:d7:62:db:84:02:af:c5:8a:f9:5e:38:57:04:55:83:
51:7d:0e:7e:f4:d5:a1:2c:bc:a8:06:66:44:f4:80:93:43:ae:
4b:21:0a:5d:87:16:bb:25:e4:c8:48:99:d6:78:63:90:e0:0a:
df:34:fb:00:ed:40:58:71:b4:1e:b2:2d:21:8e:be:3c:f4:a2:
f1:d7:4a:82:43:bd:c4:da:95:f6:24:df:19:b3:5d:cf:16:94:
28:0d:f1:89:74:41:c8:65:e3:62:d5:a2:fd:02:52:ce:70:b9:
78:0c:36:21:75:42:81:6e:10:b8:73:b9:7f:9a:19:de:2b:10:
4a:e3:c7:87:06:10:b0:c5:8c:bc:32:20:e6:17:aa:4b:91:9c:
f4:da:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:48 2025 by rpki-client