
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: ySCgZtrMwUI0pj7zTtRiSoNQNo9+pntewBeql/IpY9Q=
Subject key identifier: 62:5E:F4:85:0B:22:FE:56:09:11:86:DE:59:9B:97:A9:0D:9E:EE:32
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 01988BB3971AB537E24A9805BAE5DC84BCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 121B
Signing time: Fri 08 Aug 2025 22:00:59 +0000
Manifest this update: Fri 08 Aug 2025 22:00:59 +0000
Manifest next update: Sat 09 Aug 2025 22:00:59 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: PAwduhJhWHcOj3P5w6f0iqEbuHBTgm8ojjcJzBZUjx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:97:1a:b5:37:e2:4a:98:05:ba:e5:dc:84:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Aug 8 22:00:59 2025 GMT
Not After : Aug 9 22:00:59 2025 GMT
Subject: CN=625ef4850b22fe56091186de599b97a90d9eee32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:ba:6d:52:a2:4a:bb:19:29:49:8f:0a:56:
58:a1:f2:93:8e:29:1a:97:c5:aa:7d:21:bc:4e:1e:
07:9c:67:55:93:f8:04:33:6d:de:a8:97:38:d5:cf:
6e:50:c0:ef:94:03:84:95:e1:9a:40:ad:32:07:16:
87:f1:7c:0d:31:b1:e7:64:5d:7f:8f:16:7f:3b:f0:
e2:f5:75:5b:18:33:c5:83:87:bf:cd:6a:73:64:e5:
9b:41:03:3c:3b:f6:d7:4d:eb:18:5a:aa:b6:f2:a3:
e1:c5:1a:dc:17:1d:82:eb:57:12:da:b5:1c:06:ff:
dc:76:15:10:cf:6e:ae:5b:4a:be:48:dc:66:99:d6:
e7:1b:63:8b:85:2c:c5:b3:a6:c4:4d:65:c0:f1:d1:
9e:ae:0e:a9:4e:f8:2e:ff:64:31:87:36:99:5b:2a:
56:57:ba:af:fc:e1:3b:5f:da:d1:b7:cc:51:c5:4a:
b4:64:53:eb:53:c5:16:11:69:88:20:1b:59:28:57:
d9:9c:2c:b4:3e:f5:4c:42:67:52:1a:87:b4:d2:7d:
b5:98:09:fa:19:43:e3:4a:45:a8:7a:4d:ce:64:61:
91:2c:16:07:e4:67:a9:01:eb:0a:52:59:08:96:3f:
fa:b4:f0:ee:97:29:ec:34:81:64:22:80:41:89:b1:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5E:F4:85:0B:22:FE:56:09:11:86:DE:59:9B:97:A9:0D:9E:EE:32
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:af:ba:10:cd:01:33:80:cd:f2:9d:e2:e0:ce:f7:0c:56:b3:
2d:23:0a:ca:4b:43:3c:e4:a9:0e:1e:6a:4c:8a:e1:6c:73:77:
a6:f4:e5:42:91:28:ba:26:70:3d:51:bf:8f:6c:dc:dd:5b:72:
0c:0f:97:64:85:fe:f6:91:ec:6e:5a:c9:61:75:1c:11:18:01:
b3:cb:7f:7e:70:19:a2:ad:98:63:c4:20:fe:51:1d:49:53:89:
b7:60:be:42:88:c4:88:f5:7f:91:88:3a:5a:fd:f6:f7:85:34:
75:44:d5:5a:72:8a:26:68:b4:dd:3a:c1:e3:98:1e:43:0b:fa:
00:57:c1:56:db:c2:ca:7b:98:74:1f:1e:a5:8f:06:f1:3a:d8:
4c:55:4a:7f:f6:dd:f8:67:ac:38:c9:df:15:21:a2:7f:9d:8d:
24:d1:88:5c:45:87:8b:14:bc:a6:7f:bd:66:2f:7e:bf:73:d7:
f9:9a:24:5a:b6:38:5d:52:1c:33:1d:3a:32:bd:d8:07:22:8e:
8d:2d:65:24:aa:06:75:f4:ac:86:f4:eb:73:69:72:8c:03:6f:
2f:ef:dd:3d:3e:e3:6d:94:fc:34:fb:50:81:0f:45:cf:25:f8:
d9:f4:ed:87:c4:83:75:ed:ca:08:08:81:34:31:0c:eb:a4:91:
7b:0c:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:44 2025 by rpki-client