Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: Zzj4us53woQHBe5lZJZeh456bE3gn9ncgz4RCIL79JE=
Subject key identifier: 7D:E5:34:9C:84:3F:93:C1:BD:9E:EE:04:C3:30:C0:A4:A7:B9:24:EB
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 0198880DD75F727F8C724C58DDA4E734F978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 05CA
Signing time: Fri 08 Aug 2025 05:01:05 +0000
Manifest this update: Fri 08 Aug 2025 05:01:05 +0000
Manifest next update: Sat 09 Aug 2025 05:01:05 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: WoKdErkxik4Kg+YbS/dXhseKoOZe5z/d7LVuo06Cmpo=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:d7:5f:72:7f:8c:72:4c:58:dd:a4:e7:34:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Aug 8 05:01:05 2025 GMT
Not After : Aug 9 05:01:05 2025 GMT
Subject: CN=7de5349c843f93c1bd9eee04c330c0a4a7b924eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:b9:33:f3:67:ea:32:ce:89:bf:db:8a:53:
e1:08:45:5d:c5:26:94:8f:f6:3c:50:f3:54:34:9b:
2d:d8:79:7d:f7:1b:ca:7a:d6:fd:c0:ee:e0:ae:04:
fc:c5:5c:2c:2f:b3:89:45:21:b3:52:de:c5:45:b9:
48:a6:a2:ec:6c:f7:89:f3:be:fa:b4:e6:81:bf:43:
10:e4:89:bf:4c:13:ae:67:71:23:40:64:0d:ff:60:
42:8d:0e:4b:e4:a7:51:49:13:f0:c3:6e:3b:75:c3:
74:4c:2f:72:53:cb:e5:f5:c1:59:74:c1:c4:78:b7:
96:c4:10:45:c0:f4:50:e7:5b:7c:3b:e5:f3:ec:60:
36:38:8f:ea:90:72:03:b4:99:57:80:61:ea:e8:39:
55:b0:4a:3b:49:3a:24:fd:24:54:95:f3:90:fa:b5:
b0:d7:cc:78:e6:2e:c4:12:17:3f:5d:db:91:79:89:
e9:00:57:cd:65:91:47:da:36:cc:d6:84:00:79:ac:
34:70:82:80:59:c5:44:cd:00:91:06:c8:05:9a:23:
48:97:8d:69:3f:00:d3:68:e6:35:b1:31:95:9f:11:
4d:e6:a2:b4:c4:c6:e3:30:6e:0b:9d:a0:41:4b:86:
01:f6:76:27:f2:5a:ad:77:44:ea:ee:45:b9:ef:5e:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E5:34:9C:84:3F:93:C1:BD:9E:EE:04:C3:30:C0:A4:A7:B9:24:EB
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1e:7a:90:76:65:0c:34:d8:4a:10:5a:50:81:18:f1:8b:08:
87:1d:99:d5:70:0a:91:2d:6b:91:76:8f:28:47:7f:a8:7e:33:
f9:b8:78:0d:7a:cb:be:74:60:86:e9:61:2c:a1:34:9e:f0:b6:
68:5d:5c:46:ea:a8:b0:fe:f0:96:44:24:c0:08:4f:10:01:ad:
c3:3e:9e:1c:f6:bc:3f:bd:1c:8a:18:ed:c2:2e:ca:f8:44:c4:
27:33:83:dd:ec:6b:3c:df:9a:95:a9:9d:f7:c0:07:06:17:49:
68:fd:39:46:4b:52:40:6d:2a:13:7e:bf:ae:fb:04:5f:7e:34:
d3:1f:8d:12:a4:17:ff:6b:e9:3a:b7:a8:43:95:2d:14:01:ef:
5c:87:88:b8:31:44:07:27:b0:84:a1:8f:c0:a7:0c:28:e1:f9:
7f:56:73:62:63:a7:36:0d:20:e3:77:f9:2d:44:b6:74:17:82:
b8:80:0a:f2:ac:d5:e8:ad:41:4f:3b:5f:36:ab:e5:c9:04:ec:
4e:a3:63:cf:da:76:57:26:f7:88:af:b4:69:ee:9e:0a:ac:05:
24:4b:02:5f:dd:b2:58:0b:df:a6:3c:04:d7:15:76:7c:08:ab:
b2:fc:5e:b8:cf:3d:a9:6a:c2:b1:2e:e7:6d:e1:4c:3e:39:c1:
32:51:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:56 2025 by rpki-client