Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier: KMGPcatJHOViFdAWnc+76Y+SLGR/k9mZpmCPB+TUCRo=
Subject key identifier: AE:D6:47:37:E7:BD:25:A4:E3:0C:44:6E:DD:9A:DE:38:FD:7B:59:5C
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial: 019882797867C1D6BB925874FFD4AA071226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number: 0336
Signing time: Thu 07 Aug 2025 03:00:55 +0000
Manifest this update: Thu 07 Aug 2025 03:00:55 +0000
Manifest next update: Fri 08 Aug 2025 03:00:55 +0000
Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: RCSzb33EUzNfOOaV94Qck4Em31YwPGjxG/hgTfHx2bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:78:67:c1:d6:bb:92:58:74:ff:d4:aa:07:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
Validity
Not Before: Aug 7 03:00:55 2025 GMT
Not After : Aug 8 03:00:55 2025 GMT
Subject: CN=aed64737e7bd25a4e30c446edd9ade38fd7b595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:d7:cb:b7:0f:c1:e4:c7:3b:30:ab:e9:aa:
a8:5f:81:2d:9e:23:68:53:28:4c:70:87:11:30:22:
48:83:30:bb:36:9f:ed:3e:5b:76:21:c2:9c:d6:08:
d1:5e:4f:8d:f4:26:13:9a:ac:c1:c0:0b:58:e0:ea:
1e:1f:8a:3f:45:0e:f0:3d:a6:9c:6d:b6:cd:d7:25:
e0:c6:d4:a8:d9:44:45:e0:f8:b9:6b:2d:19:35:6d:
d4:75:4c:6e:b5:34:c9:03:83:36:07:af:76:4b:12:
1c:36:7a:29:18:5c:d9:d5:a9:e9:bb:c2:12:ac:c6:
65:31:07:e7:cc:3c:a7:f0:ed:29:81:51:46:3f:ae:
31:63:46:ed:6a:7b:ff:bc:6f:f6:6f:65:b2:d2:af:
86:78:69:8f:3a:0e:3d:99:17:40:01:a5:54:ea:05:
50:56:89:83:36:04:56:22:0e:ba:20:b7:da:48:d0:
4e:d0:82:71:fa:4b:23:68:b1:d6:b8:87:04:b6:38:
1f:53:24:0c:f3:36:58:94:7a:86:71:61:11:22:10:
e7:2f:a6:11:d2:1a:bb:52:17:ea:9a:b3:af:d7:9e:
6d:3f:39:3a:a3:6e:70:96:27:c5:52:b3:c4:92:f5:
99:c8:93:53:b5:24:8c:32:1f:88:3a:e4:d8:a4:9c:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:47:37:E7:BD:25:A4:E3:0C:44:6E:DD:9A:DE:38:FD:7B:59:5C
X509v3 Authority Key Identifier:
keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a3:89:95:bb:74:c7:70:52:d1:42:08:77:55:4f:c9:f5:63:
82:fc:d1:ba:74:66:e9:3f:1b:59:fb:86:b6:f8:35:68:50:e1:
ed:55:7f:90:ca:55:3b:06:9f:28:54:f2:df:4e:54:74:16:19:
a3:ff:7c:03:95:ad:31:cd:1d:30:76:a1:11:58:2c:41:1d:4d:
48:8d:cb:75:3b:6d:d7:fb:d6:07:0e:43:a9:fb:bd:7d:9e:5d:
f1:b2:6e:4f:fe:78:6f:4b:b1:67:66:0e:91:53:00:49:a5:99:
4b:03:59:4d:f1:1e:d5:ac:d1:2c:bd:81:2e:67:a3:bc:41:c9:
c0:bb:94:2d:ca:89:6e:97:74:75:74:39:0c:bc:67:81:df:7e:
1e:40:dd:d7:b4:70:23:7d:89:8b:a2:69:4d:2a:25:5c:13:ba:
03:6b:2c:94:63:f2:b8:6d:5b:3c:88:cc:f3:6f:37:2f:82:15:
cf:09:cc:13:3e:86:02:81:af:61:af:c0:06:18:a2:f4:05:cb:
16:83:1e:92:fe:60:ef:d9:e5:13:31:46:1d:2c:2a:b8:46:a9:
05:b5:ef:dd:ab:cb:f8:ca:2d:31:f1:3f:cc:71:e9:e2:54:f3:
fc:97:ae:f6:f8:c3:80:60:7e:7f:8e:53:72:27:5e:c1:78:bd:
2b:40:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:33 2025 by rpki-client