Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: ydfoykmVuvSU/gZG2Q/sCqjPuGOhxnZ3rgMGYyzYX+k=
Subject key identifier: 96:DA:AA:30:62:00:8D:52:14:92:08:91:B0:3A:59:65:37:61:19:0C
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 0198820B73CEE7B19DB3418070024811E14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0CAC
Signing time: Thu 07 Aug 2025 01:00:45 +0000
Manifest this update: Thu 07 Aug 2025 01:00:45 +0000
Manifest next update: Fri 08 Aug 2025 01:00:45 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: TXF7V0iux+ZtwwrTEbDt+endRoPzlAH95WdFXthahsQ=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:73:ce:e7:b1:9d:b3:41:80:70:02:48:11:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Aug 7 01:00:45 2025 GMT
Not After : Aug 8 01:00:45 2025 GMT
Subject: CN=96daaa3062008d5214920891b03a59653761190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:f9:52:a8:88:a6:55:94:65:d4:8b:18:7e:
83:4e:9d:ee:7c:1a:70:e2:19:5e:a2:51:d5:07:fd:
cb:a8:7b:01:2c:f5:f8:7a:2b:07:d1:f9:b6:bc:9b:
e0:fa:70:47:8c:21:a7:dd:4b:bc:6d:2e:af:87:e5:
b5:67:93:8f:16:7e:a7:8c:fb:58:5b:64:b5:35:72:
91:7c:bc:f1:32:7d:5c:67:b6:5a:37:6d:61:8f:03:
29:7c:b0:02:1e:69:b3:b8:af:32:68:48:48:d4:29:
52:f8:5a:0f:fa:48:0d:81:23:c0:86:7b:63:cd:f4:
a1:fb:25:cd:0a:a3:c9:4f:cd:c3:18:d1:42:6b:77:
9c:7c:8d:b1:4c:d5:03:7d:f8:15:77:4d:f6:d7:e3:
0a:8a:66:d2:5f:66:bf:fd:7e:52:75:de:82:de:35:
5d:23:bf:a0:f9:3a:75:e5:07:03:f4:40:85:12:9c:
bc:4a:f3:2a:8f:b5:5b:89:6f:75:39:a1:19:b6:29:
73:f4:27:e0:9e:ba:e0:d2:2a:16:2e:93:03:76:54:
c7:21:b8:30:a9:97:f8:ac:6f:03:ef:8c:05:30:5d:
6f:3b:00:5b:aa:ad:d8:16:8a:48:a6:0d:49:b0:16:
06:9a:68:6b:b7:d0:3e:9f:89:1b:e7:74:3a:b5:97:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:AA:30:62:00:8D:52:14:92:08:91:B0:3A:59:65:37:61:19:0C
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d5:bb:42:89:07:22:df:53:f0:4a:aa:30:91:0b:8b:77:72:
e4:50:9c:df:bb:b5:6d:90:87:a4:d2:30:ce:60:52:8d:c2:28:
2d:54:b8:89:cf:f3:e3:df:5e:4b:30:d7:45:0d:f3:c0:0d:cd:
9d:42:28:c4:de:dc:d1:ad:3f:8a:03:ba:1c:96:3c:69:f9:0c:
4d:fa:37:60:1a:a2:8a:43:f0:6c:5f:3f:75:d0:ba:26:c7:f9:
0c:09:d5:e4:02:0d:e1:a4:87:16:3b:b4:af:de:fe:74:b8:11:
c4:ad:51:97:2f:31:3d:72:34:3b:b7:32:4e:0d:d4:88:0b:9b:
43:f5:4b:fd:e4:a8:7b:bf:9f:ff:03:38:a7:1c:4f:39:5b:89:
3e:a1:9b:46:bc:01:47:52:b2:b0:2d:6f:07:0d:dc:28:c8:1c:
b2:ad:25:2d:49:52:9c:f3:e8:18:b0:85:9d:a2:15:9a:2e:21:
56:ef:f2:4a:69:ed:7e:c7:a9:61:01:e8:54:6b:2b:e6:cb:6b:
3b:e6:4a:a3:68:c0:27:5c:e7:40:0c:b7:7b:3c:aa:c6:e5:c0:
49:e3:b3:3f:16:f2:18:99:4e:98:11:fa:4d:8a:52:02:b1:62:
13:00:97:8d:f5:ee:fb:ee:a7:e4:98:8b:64:52:f3:93:5e:61:
84:4e:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:21 2025 by rpki-client