Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: rfFOLagHxBYS37DFkDXvJWI3at0VpOm5e7n0IB4b904=
Subject key identifier: 20:91:8A:03:0C:1B:30:AE:EC:F2:90:DC:4E:1F:F1:9B:4E:3D:A9:FD
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0198D47263B6A95DF8169AEE3F3168DFAB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0D83
Signing time: Sat 23 Aug 2025 01:02:02 +0000
Manifest this update: Sat 23 Aug 2025 01:02:02 +0000
Manifest next update: Sun 24 Aug 2025 01:02:02 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: 751NUzj3ehqP5t2h+BHPW5BhkRxEaXv/wvMksOiX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:63:b6:a9:5d:f8:16:9a:ee:3f:31:68:df:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Aug 23 01:02:02 2025 GMT
Not After : Aug 24 01:02:02 2025 GMT
Subject: CN=20918a030c1b30aeecf290dc4e1ff19b4e3da9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:53:3f:24:95:d5:53:c3:12:ee:eb:36:3a:
60:d7:89:13:a3:ed:6d:60:5a:b8:f1:b2:8c:af:e6:
6d:14:a3:88:3c:94:c1:3e:a7:8f:9a:56:48:0b:83:
26:d3:28:e1:d5:d3:40:47:b2:df:25:94:72:df:8d:
36:a5:ef:65:c7:a7:5b:23:ea:f0:57:b4:7f:22:5d:
c8:c9:f6:d8:6d:85:75:24:df:4e:48:92:40:90:c1:
51:ce:66:5f:98:6b:a2:bc:09:47:67:95:84:51:7e:
0d:d7:66:b8:b9:56:93:a8:79:18:53:64:79:fb:37:
80:72:0d:ec:9f:7a:25:e7:1a:77:35:4e:1e:b6:31:
2d:64:0b:2c:f7:fc:6a:85:c2:f0:8b:58:34:91:55:
64:e0:04:79:f5:3f:f0:e7:d1:8a:3c:3d:7d:4b:44:
90:15:dc:33:af:f3:ea:44:b5:33:ee:fa:d9:6e:63:
ce:99:07:1c:30:e4:8d:98:0d:54:ca:aa:40:40:2e:
fb:18:b3:05:5e:2f:52:32:65:3b:bd:fd:6d:cd:20:
dc:51:6e:07:d2:c8:56:cd:51:8d:80:a2:2e:16:ba:
9e:91:3c:ef:03:4c:2c:47:fd:97:f9:7b:4f:ae:4d:
51:64:f2:32:50:fb:14:13:00:be:65:dc:f7:2e:d5:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:8A:03:0C:1B:30:AE:EC:F2:90:DC:4E:1F:F1:9B:4E:3D:A9:FD
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5a:d5:30:50:6c:d6:0b:9c:73:50:3c:15:80:0c:ed:ef:76:
7b:f1:5d:6a:be:50:78:9c:5f:14:a9:71:37:11:cb:95:1c:dd:
9b:ae:11:9e:04:82:82:a2:5e:96:c4:e6:7a:69:15:15:68:a0:
c4:32:c6:91:ca:a4:ec:47:9e:4a:e2:91:94:4e:56:6b:82:88:
be:87:b1:e6:3c:47:21:54:a8:af:f4:bf:b7:ab:0c:1d:2e:ec:
6c:bc:dd:f8:66:87:f8:b4:d5:7e:a8:62:58:16:bb:42:09:8d:
81:6f:a1:18:ac:a6:49:ac:ff:62:5b:ad:99:cf:42:74:89:29:
cf:70:27:64:ae:8a:09:a4:9a:4f:75:b9:d1:c4:83:ca:8b:ea:
a8:a7:a7:a7:49:27:bb:7b:46:00:f8:38:2b:70:ce:4f:10:b2:
e5:e0:a3:0b:06:46:e9:34:bb:61:d6:60:ce:57:a7:c1:41:d2:
84:19:54:b7:e0:07:e9:43:c9:62:b8:54:cb:e0:b1:f7:89:ce:
87:ad:6d:80:51:be:5c:ed:8b:38:5e:84:b1:b9:1b:87:5d:f7:
81:16:f4:9e:34:58:a0:95:fe:c1:8e:b9:99:55:f0:ea:de:a9:
aa:1e:52:87:d4:c8:93:14:03:68:bf:9c:dc:b3:ef:cc:aa:98:
86:c3:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:14 2025 by rpki-client