Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
File: 3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json)
Hash identifier: vwiY+rzTZzxIp2BoEN9lXoVoBIHD8JzcKeiOaYb2Axg=
Subject key identifier: 44:0E:30:22:62:CE:9B:24:3B:55:F2:A8:4E:F6:85:4E:53:6E:F4:4F
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial: 01989FA7FF0508B2A8A3FB37B4FFB5BE5F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
Manifest number: 0129
Signing time: Tue 12 Aug 2025 19:00:43 +0000
Manifest this update: Tue 12 Aug 2025 19:00:43 +0000
Manifest next update: Wed 13 Aug 2025 19:00:43 +0000
Files and hashes: 1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: PSNWVhV8sIYdMAIZ/QyV8NpDz1CK17++RcBzG+5E7uc=)
2: 4YPbiAtEI4aIVwSYoOB9atG5l_o.roa (hash: 5G9M3UH6Px38TdWKWNsZTcUTomaq2supA1BUuPBFOUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:ff:05:08:b2:a8:a3:fb:37:b4:ff:b5:be:5f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
Validity
Not Before: Aug 12 19:00:43 2025 GMT
Not After : Aug 13 19:00:43 2025 GMT
Subject: CN=440e302262ce9b243b55f2a84ef6854e536ef44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:7d:9f:db:9b:a1:24:00:7f:d7:0e:3f:72:
b5:e8:23:e0:c7:23:23:8b:ae:6b:9a:ed:15:15:a5:
60:de:33:ee:c3:61:ac:d1:de:66:7c:61:6d:da:21:
7a:50:06:5e:47:8c:41:25:88:68:ab:fd:7b:c9:83:
2e:59:15:30:52:46:59:81:d7:e2:bf:9e:55:ec:8b:
f0:6c:ad:48:99:3f:f1:42:1d:65:ec:93:32:e2:1e:
1a:87:b2:f3:50:4f:0d:3d:43:0b:eb:03:e6:e7:47:
32:c8:c9:49:72:c2:2f:e8:d1:b1:9c:74:0c:03:94:
5b:d3:2e:39:e4:f9:5b:da:84:e3:f2:00:5f:e3:f1:
f3:5d:55:3f:1f:6b:b3:66:ae:d7:3b:47:50:13:bf:
db:6e:10:dc:f4:33:3f:0e:27:12:d4:32:30:4b:1f:
36:95:22:20:44:bb:e1:2b:28:f1:62:22:63:b1:63:
51:2b:ba:b0:01:6d:7c:cd:c3:79:5a:7f:8a:20:79:
fc:f5:3a:74:2b:27:8a:19:5d:64:9e:3d:8e:ca:e2:
97:db:c9:52:15:c9:fd:e5:87:7d:88:65:7d:f1:5d:
2e:a4:e8:1b:1c:2a:2b:14:04:e1:ee:e1:e5:21:85:
8b:73:14:98:77:58:8f:34:e4:35:69:9c:78:ad:18:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:30:22:62:CE:9B:24:3B:55:F2:A8:4E:F6:85:4E:53:6E:F4:4F
X509v3 Authority Key Identifier:
keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c9:5e:45:78:2b:2b:d8:af:54:93:d6:3f:bd:9f:1a:8b:ae:
70:03:43:ce:f9:28:a4:b3:dc:52:1a:41:16:cf:54:6d:5f:56:
55:1b:6b:55:a2:f8:64:b9:ff:08:d4:9e:b2:91:9a:40:a2:de:
18:b5:b9:c6:43:52:c3:f6:97:39:d0:cc:a5:90:84:e9:fc:bd:
3c:f8:5e:ee:35:3e:4a:24:c2:b6:27:ed:9e:98:9b:f9:37:62:
02:73:18:04:e3:51:09:4d:f8:f9:22:cb:94:02:3f:61:4a:56:
a6:26:6a:32:de:d9:db:41:7e:2d:6c:a2:f6:ef:11:d4:fb:25:
78:fd:69:ba:17:3c:f5:d5:44:2f:1b:3e:06:18:04:4e:6f:a8:
78:94:8f:4d:23:c8:c1:f1:3e:60:37:21:b3:f1:42:35:de:43:
eb:3b:d3:c9:ea:d2:85:17:68:31:3c:26:fd:bc:30:48:7a:eb:
18:f0:b7:09:75:0a:03:3e:b1:b9:7e:ce:41:4e:cc:75:2d:ea:
45:79:27:02:38:3b:07:42:92:8c:f6:f6:be:e9:e8:f5:24:e9:
37:42:3d:90:28:23:bd:a5:5a:d8:cc:d4:5a:b6:08:96:2d:47:
b0:21:17:4b:63:37:6e:e1:0c:b3:5a:ce:e8:28:08:d5:c9:6e:
7b:97:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:40 2025 by rpki-client