Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: qSHfoxZiaMmQRlLfpKjux2MXimXhhOZFgxlh9M/NkmE=
Subject key identifier: D1:9D:D6:71:94:18:37:B6:C4:03:54:C5:98:1D:6A:0F:9A:DC:73:E2
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 0198744FDF820FF213A5F3891687BF016CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 15AB
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: Yx8k18hR6ydamZDFxEdMueZ/MJdStL530cmEgiDhdIw=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:df:82:0f:f2:13:a5:f3:89:16:87:bf:01:6c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=d19dd671941837b6c40354c5981d6a0f9adc73e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:72:36:64:53:5d:c3:2d:fc:4a:ba:58:f9:
dc:14:50:f0:a9:fa:d5:1c:21:3c:1b:a7:e5:1f:32:
9a:ef:b2:0e:01:20:b5:ce:f8:2a:e7:d7:cb:a0:e0:
d4:b9:91:7e:98:93:91:f0:c7:cb:2b:dd:af:7a:92:
f3:19:39:81:6e:95:d4:fe:37:a9:03:fd:82:d1:d0:
8e:6d:14:ce:11:ab:cd:fc:6c:e3:50:12:86:39:bc:
08:ef:2e:3c:e3:a7:f0:04:ea:6f:d2:f8:e5:0c:6e:
33:a3:db:69:a6:77:52:b2:96:73:be:04:a4:cc:18:
c1:3b:b1:da:c9:1e:e8:06:fd:1c:3c:5d:37:b0:20:
6e:16:a5:32:7b:55:07:8e:2a:bd:ea:65:f0:a5:fb:
1a:14:bb:6a:49:c6:ec:96:6c:d2:d5:10:cc:d8:f6:
2a:c3:cb:02:e6:ed:3b:ae:54:56:d4:0c:bd:e8:96:
54:99:f9:7b:c6:db:52:60:60:a6:9e:eb:df:84:b8:
97:ca:d4:0f:7e:74:6b:64:60:72:8c:89:2b:a6:28:
e7:1a:7a:0b:86:cc:cd:1e:7c:7a:db:25:c7:69:e0:
8e:a5:d5:2e:9e:1e:8f:40:83:61:c4:63:57:66:fa:
cd:b4:4d:b2:b3:f4:fb:27:70:c5:b8:25:aa:44:3f:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:D6:71:94:18:37:B6:C4:03:54:C5:98:1D:6A:0F:9A:DC:73:E2
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:53:cb:07:0d:29:18:47:5e:81:99:d4:ca:ae:94:9e:d7:48:
da:7b:86:e8:06:d7:77:f5:5a:b4:b9:eb:35:8a:42:70:14:02:
fc:8c:20:28:90:34:aa:cf:1d:3d:b8:fb:79:72:38:f4:1f:28:
38:0d:7f:24:f2:78:fe:d4:ea:99:7b:9a:8f:c5:d7:b6:d7:bb:
da:e5:a6:33:a0:c2:a6:28:83:2f:f7:c3:a6:26:94:ac:38:b6:
ae:77:ac:fa:67:c4:21:cc:8f:4e:a4:e7:43:d6:eb:d2:e8:29:
11:7a:de:a0:ba:f5:51:a8:38:6d:43:d0:49:7d:f4:be:08:92:
4e:9b:31:aa:25:85:2f:16:c2:91:e4:ed:f1:36:f0:bb:81:55:
78:94:35:d0:1d:9f:9f:72:fe:8e:5d:40:7d:93:6f:ba:20:3b:
83:11:f0:bd:b3:4b:aa:a8:b2:d9:4a:5b:01:ff:c9:b9:59:5a:
f1:c2:d5:7e:19:a4:56:16:00:af:f7:90:1b:0c:61:1d:b5:e0:
31:37:03:5b:95:17:33:cb:9a:e4:f9:de:5c:57:4b:80:02:a2:
f6:fc:05:26:1c:55:e7:d9:14:74:21:f0:6f:3d:ba:57:cb:96:
1e:11:b9:db:4b:95:f5:2b:de:f4:43:2c:e5:c7:ef:0f:b3:d2:
8d:f9:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:58 2025 by rpki-client