Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: D9klIYCZfCLBZfl05Rbq0E0F02lG5oe1feZWgb0E5vA=
Subject key identifier: 53:62:AA:45:CD:55:9D:E2:2B:89:EA:19:C3:9C:9B:5E:99:90:E6:B6
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 01987D1C002715B58BBBD80A3C490223EF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:00:43 +0000
Manifest this update: Wed 06 Aug 2025 02:00:43 +0000
Manifest next update: Thu 07 Aug 2025 02:00:43 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: GXvzDx6bzxg8RUjNwGKlHI1ENsVSfQIMRnJg4Kfi6FE=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:00:27:15:b5:8b:bb:d8:0a:3c:49:02:23:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Aug 6 02:00:43 2025 GMT
Not After : Aug 7 02:00:43 2025 GMT
Subject: CN=5362aa45cd559de22b89ea19c39c9b5e9990e6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:94:a9:95:4d:ca:49:22:94:4d:7e:16:a7:
85:a1:30:65:f7:2e:ee:3f:51:6d:10:10:53:ef:4b:
5d:a7:64:ca:05:29:32:b2:cd:97:ac:03:9b:5d:2a:
a0:b3:34:d6:c6:8c:76:3c:49:90:b1:64:20:f0:f6:
a6:b3:77:d2:b3:ed:ea:9a:9b:a1:c3:89:83:bf:3c:
38:c9:13:08:b6:c3:99:97:38:07:34:0d:6c:f4:a4:
35:63:25:ee:2a:23:3c:70:07:6f:f3:ed:55:f3:97:
f8:17:78:73:f3:97:59:48:32:8d:82:2f:df:dd:5b:
27:b7:78:e7:56:37:94:cb:3a:66:25:10:6b:ca:1a:
f1:af:ea:94:e5:41:10:60:03:c9:d3:21:06:35:92:
cd:e7:1a:a0:8f:0c:a0:a7:93:1b:f7:e0:c7:82:b6:
2e:e7:c5:0f:01:01:08:33:18:00:d0:fc:f4:df:a2:
b1:78:6d:50:0b:33:b6:51:08:74:6b:93:db:a7:3e:
ca:4c:6a:e0:55:14:af:03:50:aa:19:b7:39:60:b2:
89:c9:cc:1f:3b:63:1e:ab:5f:96:92:68:7b:72:ab:
f7:62:02:45:74:f4:ae:a5:02:67:a7:f6:a1:d5:93:
18:5f:52:a7:78:eb:31:64:d6:8a:72:fc:c8:e8:78:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:62:AA:45:CD:55:9D:E2:2B:89:EA:19:C3:9C:9B:5E:99:90:E6:B6
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:16:35:fa:36:52:e7:80:88:7e:af:32:83:95:fc:58:a6:03:
d9:c4:9e:73:42:cb:f5:22:23:b4:40:4d:1b:65:72:de:3b:4f:
ce:44:52:f8:15:1d:86:05:56:67:bf:0d:af:fc:d4:92:e5:73:
20:f0:3a:4f:5a:5b:a8:09:5f:b5:e5:7d:ae:5e:6f:35:56:04:
fd:17:69:6a:b8:53:9e:17:d0:de:0f:b0:b2:a7:27:cd:65:90:
e6:1c:a0:1a:58:06:29:51:a0:68:a5:9e:22:7e:58:21:f5:2c:
9f:8e:7d:f3:fe:c4:f3:8f:c3:b1:2e:b7:4d:00:50:fb:20:8f:
5c:5c:02:8d:1c:5e:d5:16:a7:88:f3:0c:0c:59:4f:aa:44:1f:
fc:31:db:02:9b:9c:29:08:37:46:c5:2d:28:26:f9:f2:54:a4:
98:d8:5b:0c:98:f8:6c:f3:6d:f8:f7:6b:22:78:5a:a6:d3:80:
ba:cc:f9:57:b8:e9:df:04:f7:81:19:cf:0e:68:4e:8e:c8:37:
47:3e:5e:4f:3d:52:c8:9f:ff:8e:2d:c2:f1:bf:c5:f0:c0:77:
fb:f9:40:68:49:2a:76:bb:38:b3:0f:f4:49:26:0d:e4:96:b4:
6a:e4:45:13:9b:ab:02:4a:13:6b:01:52:4d:32:e7:fb:90:f8:
62:0c:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:12 2025 by rpki-client