Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: KBIZafO0X0wD1Df5LwhN/pH9Ku5r2GVIGjFnF7cdHbI=
Subject key identifier: 0D:0E:39:92:67:F6:1B:4A:EB:7A:22:B5:FE:43:43:FA:8D:A8:39:B7
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 01988B0EF7362609FE76878621C67EFC7C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0CB2
Signing time: Fri 08 Aug 2025 19:01:10 +0000
Manifest this update: Fri 08 Aug 2025 19:01:10 +0000
Manifest next update: Sat 09 Aug 2025 19:01:10 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: XgN8+4NzPPOl9MLj7AtL1SU6z0pLefX8oJo1k5z91/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:f7:36:26:09:fe:76:87:86:21:c6:7e:fc:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Aug 8 19:01:10 2025 GMT
Not After : Aug 9 19:01:10 2025 GMT
Subject: CN=0d0e399267f61b4aeb7a22b5fe4343fa8da839b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:fc:05:81:fb:35:21:f1:a0:97:da:c0:f2:
9b:98:c6:55:ab:17:00:b6:81:ef:9b:aa:1b:02:f2:
f4:47:67:46:f1:81:5f:49:86:65:ee:a8:09:54:a5:
2e:a4:a6:a8:4c:2e:ae:db:a9:cd:96:ae:f6:ae:09:
11:4f:6f:69:0a:5c:b9:fe:9e:26:1f:c1:6a:3b:8a:
7d:d1:1a:ab:1d:e6:05:46:e5:e1:5c:00:ce:e2:28:
57:7c:37:2a:4f:05:0e:f3:e6:57:9e:81:c5:d0:06:
27:84:7e:37:88:eb:eb:da:f0:99:50:02:61:4a:ab:
7e:c4:77:44:f3:4f:d4:9c:17:4c:12:d4:e6:33:70:
c7:b8:6e:c4:aa:d2:8b:1d:c0:83:9f:d8:6c:7b:20:
4b:98:6d:95:0c:aa:d7:98:8a:ee:77:5f:22:04:af:
34:5a:25:52:98:78:1c:99:3a:2b:dc:c3:b3:bb:ef:
dd:74:a4:11:f7:b4:5d:c5:2a:28:62:40:fc:67:fe:
de:3f:ad:a9:55:ab:60:fe:0a:2e:4e:48:a4:5d:89:
44:a5:68:70:f1:5b:4e:2a:6a:fb:37:b2:a9:f2:17:
7b:35:da:05:a2:b3:73:48:48:0a:d4:3c:4a:98:af:
13:b2:bb:43:01:be:36:6b:74:7b:17:9a:5a:e8:3f:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:39:92:67:F6:1B:4A:EB:7A:22:B5:FE:43:43:FA:8D:A8:39:B7
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:52:ba:49:dd:3f:df:9b:33:ce:ab:c6:77:eb:69:f6:98:ee:
0b:5b:09:99:8f:c7:cc:5c:91:73:0c:32:eb:52:44:78:5b:13:
3b:3e:18:cf:22:37:af:cd:aa:4b:9e:63:80:58:ca:6f:9b:0f:
69:07:54:f8:1e:67:78:eb:50:22:3d:88:e8:e8:e2:73:9f:b5:
38:c5:bb:de:b4:ad:43:de:a3:5f:fe:e7:80:56:9c:af:ba:0a:
ab:0a:45:b3:1e:03:97:96:ee:07:cf:17:41:20:b5:91:b4:8f:
0a:2d:d1:c6:7e:1e:82:78:cf:e2:a3:e8:24:08:80:ec:56:9b:
60:a7:4c:88:e2:53:2b:9d:70:c1:3b:68:41:b7:a1:d5:74:97:
a8:66:40:97:b6:d2:cf:42:a1:4e:4c:aa:fe:1c:34:4d:1c:8a:
82:18:d0:38:4b:54:99:eb:6e:e3:8e:e4:c3:16:04:a5:c1:bb:
91:5a:ec:60:ee:14:20:00:a2:ff:dc:f6:0e:b4:02:39:d4:09:
48:d6:5f:0f:4c:cf:ba:bd:a1:cf:3b:50:18:20:55:bd:ce:bd:
9a:e9:49:85:f3:03:bc:3e:f9:42:6c:e8:0d:fe:e9:db:f5:e5:
5f:b8:57:67:3d:35:13:00:77:e3:4c:4a:2b:64:49:ab:fa:59:
c5:3a:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:22 2025 by rpki-client