Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: vqsTU9Xg2QTc0iJlbw4ELxCLEaHwXz6eMa7PiUuLKkA=
Subject key identifier: D3:3B:1D:4B:CC:A0:C5:CB:F4:C1:73:61:57:F1:20:42:21:8E:6E:9C
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 019891EC53BD8DC2C7507479EFD0A707D3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0D62
Signing time: Sun 10 Aug 2025 03:00:40 +0000
Manifest this update: Sun 10 Aug 2025 03:00:40 +0000
Manifest next update: Mon 11 Aug 2025 03:00:40 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: lljOWiPbrddKSQHOqyu3eAE/ajJ3d14LFbbP+p3t2aw=)
2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:53:bd:8d:c2:c7:50:74:79:ef:d0:a7:07:d3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Aug 10 03:00:40 2025 GMT
Not After : Aug 11 03:00:40 2025 GMT
Subject: CN=d33b1d4bcca0c5cbf4c1736157f12042218e6e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:92:85:f9:43:f5:9b:8c:9e:78:74:b1:6e:
14:10:a6:19:b4:6b:13:e0:22:5b:25:ca:8d:82:76:
d1:da:d8:da:87:e7:78:f7:f6:d9:d7:43:34:9f:15:
06:ce:db:04:9a:a5:34:c2:42:aa:9d:28:c8:ad:56:
a0:23:a4:fc:6f:89:85:0f:c7:94:5b:ea:98:e2:3d:
4e:f3:ce:ec:af:9a:f2:d6:97:6f:a0:9c:40:bd:cf:
09:cc:92:3f:31:fd:cf:3e:9d:6f:41:b8:8b:e7:99:
88:64:be:59:f8:4c:a1:88:4e:c0:ea:e2:56:8e:40:
4e:28:8f:90:7b:0f:12:93:3b:fb:bd:27:88:47:4a:
9f:cc:2c:1d:af:a6:25:a9:b7:46:b3:cd:cd:cd:33:
c0:e8:4e:11:f7:98:63:bd:c3:fb:7f:0c:d9:bb:bc:
ff:bc:1d:d4:8d:d2:8b:02:10:60:02:64:33:71:a5:
04:d7:0a:03:bb:45:b5:ae:b7:46:4b:e5:a8:32:96:
6f:ba:bb:bb:f5:dc:b6:b0:bc:4e:74:45:3e:b7:77:
d9:fa:23:5b:66:d0:f2:fa:06:cb:3f:d7:91:41:7d:
03:2a:08:9b:11:03:53:cf:4d:19:80:d2:5c:fc:9d:
7c:b5:5f:f5:e0:48:8d:4c:33:c1:4e:ab:80:72:9e:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:1D:4B:CC:A0:C5:CB:F4:C1:73:61:57:F1:20:42:21:8E:6E:9C
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f4:24:f6:37:b6:63:ae:c3:dc:6d:aa:14:dd:63:63:de:ca:
fb:d6:6b:e7:b8:f9:b5:b1:83:d3:ea:95:ae:64:1e:db:4d:8a:
99:ec:a3:84:76:5a:ee:dc:9c:aa:48:77:81:04:bb:22:f2:f0:
37:97:15:5b:ba:1d:7e:53:ee:e8:46:07:37:3e:88:96:b1:0f:
d3:25:86:4e:67:c1:c8:92:11:4c:66:1b:ae:b5:6e:1b:29:12:
52:ca:6f:16:f6:b2:4e:9b:f9:37:79:97:e5:4d:0d:c8:5f:67:
7f:ab:44:a2:7d:9b:4e:0f:f1:61:30:5b:dc:5b:bb:b4:35:3f:
09:05:0f:87:cf:97:02:79:da:8d:b4:40:44:6d:8a:41:62:a7:
b8:a7:0b:9d:c5:17:9f:d2:cd:73:b9:b8:3d:cc:9c:f4:1a:3e:
e3:6a:0b:0a:11:fa:aa:fa:dd:16:9c:b3:15:37:64:d4:fd:ff:
5e:7d:b6:ed:68:75:17:11:d5:e8:05:cf:ac:17:2b:1e:fb:01:
e1:0f:a7:fc:7e:69:13:94:66:16:19:12:68:38:8b:89:ba:b5:
45:9e:8b:3c:82:a8:bb:72:63:3c:85:93:03:34:00:a0:88:c9:
ec:be:67:8b:ba:d1:b0:b5:f9:25:03:a8:bb:a5:a4:fb:a7:c4:
26:59:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:32 2025 by rpki-client