
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: T5+Df3Yw5ZPMwUKT7BlxAucYtBN+CGkub/UP5Vk+2vQ=
Subject key identifier: 5A:F3:AA:9F:BB:20:71:64:ED:C8:33:74:11:B7:F4:C9:D0:8E:79:F6
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 01987450C0805C565A15EDDC0AFD1D75972F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0710
Signing time: Mon 04 Aug 2025 09:01:45 +0000
Manifest this update: Mon 04 Aug 2025 09:01:45 +0000
Manifest next update: Tue 05 Aug 2025 09:01:45 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: i1zLn1ew372TIKUN1GLq5mTVvsUwg7Y5tZgyL/bbKXM=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c0:80:5c:56:5a:15:ed:dc:0a:fd:1d:75:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Aug 4 09:01:45 2025 GMT
Not After : Aug 5 09:01:45 2025 GMT
Subject: CN=5af3aa9fbb207164edc8337411b7f4c9d08e79f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:af:89:88:e4:0a:e7:2b:89:a1:a8:81:8d:
f9:bc:3e:ef:94:9d:6a:6e:60:18:41:43:e1:4f:b6:
f9:27:7c:03:8a:89:d2:62:46:23:11:f7:ae:0e:7d:
c8:1d:38:ae:fc:71:97:97:68:0f:38:30:38:fb:27:
1e:a5:ce:28:e8:69:73:d0:3c:92:9c:ed:5e:84:ba:
91:39:58:25:3c:8f:47:97:5b:af:f3:1c:2b:73:ed:
ff:37:36:99:c9:e6:67:ff:0c:e2:b5:e6:25:1b:34:
f5:47:d0:4a:8e:ae:e6:dd:bb:26:32:e3:3c:9e:56:
de:47:d3:25:d7:1e:17:9e:c8:21:55:9e:b4:21:a0:
6d:cf:04:23:58:17:37:0c:bb:91:70:ce:47:e6:18:
bd:5f:09:26:f4:c6:ef:b5:0a:07:74:a4:30:9d:bc:
0a:64:5a:93:13:08:62:da:47:b1:f2:f1:61:31:ff:
d7:f1:cc:8e:13:49:d4:ce:f8:d4:47:16:c3:c5:10:
1e:b0:24:19:8c:ff:a4:9d:ec:c2:07:27:ed:53:b4:
0d:66:d1:d4:6f:ba:a1:5e:27:8d:b5:81:46:03:82:
1f:0b:83:cb:20:c9:5a:21:97:5d:56:d9:9f:99:f1:
45:5e:9a:75:59:81:37:a6:9f:04:47:8f:84:32:68:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F3:AA:9F:BB:20:71:64:ED:C8:33:74:11:B7:F4:C9:D0:8E:79:F6
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:be:41:c5:39:62:2f:5b:5b:e2:4f:6d:fa:2a:36:e2:ba:2b:
63:5f:4e:99:f2:22:e7:16:d9:bf:bb:e9:f0:60:12:ec:96:9c:
d0:c7:e0:b6:a9:39:ab:75:4d:c8:4c:65:37:77:77:80:29:c0:
54:1a:d4:b9:e6:de:f0:b3:18:e2:3a:fd:4b:2c:82:bb:9a:22:
c8:c8:c7:08:ae:e5:bd:74:40:14:62:03:f7:f9:a3:eb:34:9b:
88:f5:e0:8d:9a:d6:71:aa:d6:f6:39:b6:f7:ed:56:17:63:c1:
1d:bf:45:a0:dc:2f:f0:57:8b:b0:45:15:49:33:fd:0f:e5:2e:
29:9e:2f:aa:85:81:0a:77:8e:73:79:b8:df:51:0e:ff:46:0c:
e8:bd:4c:4b:73:c9:74:0d:e9:f2:0b:7b:4f:5a:98:f6:a9:a3:
33:48:92:df:12:d2:5f:7c:00:02:e8:26:6c:26:a9:cc:1d:ba:
7e:9d:44:5c:7b:94:59:00:1a:7c:ff:dc:92:0e:81:0d:bc:89:
65:27:76:8a:c1:4f:ea:00:58:cf:05:b0:9b:76:96:92:0d:aa:
bc:39:97:8b:49:ea:b1:40:42:8b:58:cf:fb:d3:20:0a:6b:c0:
64:9b:d2:22:e7:52:35:a7:21:47:80:29:84:90:c8:22:62:24:
58:21:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:24 2025 by rpki-client