Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: /GVMRulebQP026OtwOQlpvtCi7xtl1/4ItJGDsEXzIg=
Subject key identifier: F7:54:7F:03:4F:51:E4:25:70:B3:94:9B:3C:21:2F:F6:72:8A:F2:B7
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 01987E6672B1DE26AA04D355A764279E911B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0451
Signing time: Wed 06 Aug 2025 08:01:39 +0000
Manifest this update: Wed 06 Aug 2025 08:01:39 +0000
Manifest next update: Thu 07 Aug 2025 08:01:39 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: nNyKV5Tv/lyh+yBrmqzktUoau5shk2k7QgTb1mH39nw=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:72:b1:de:26:aa:04:d3:55:a7:64:27:9e:91:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Aug 6 08:01:39 2025 GMT
Not After : Aug 7 08:01:39 2025 GMT
Subject: CN=f7547f034f51e42570b3949b3c212ff6728af2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:9e:cc:4a:f9:49:e3:10:64:d7:2b:3f:91:
ff:6a:24:65:fd:58:cd:0e:79:da:44:c2:d9:92:f4:
8a:7e:28:68:76:55:28:e4:9d:5d:70:1f:33:76:ae:
64:33:a4:40:cc:d6:91:a2:f9:dc:56:a6:c2:cc:a4:
0a:a2:9d:82:c4:eb:df:a5:35:24:8e:d0:73:27:bd:
30:ae:19:84:a1:1a:e3:42:b6:2f:d2:a7:71:53:bf:
48:42:3a:cb:ba:f8:db:3a:2e:49:92:0e:f7:2a:8c:
41:f2:a1:39:0d:47:1d:b1:76:fa:40:1e:58:e1:ae:
2c:6a:af:c7:34:bb:8c:3c:8a:07:82:a3:26:ec:1a:
31:de:ba:ed:35:6f:81:c9:09:a8:d4:c1:ec:7f:25:
e0:65:3e:aa:f2:af:9a:fe:5a:4b:58:90:c4:26:7f:
02:73:75:3e:57:61:32:d1:2d:99:86:9b:dc:de:e8:
b4:9b:20:85:89:1a:98:44:ef:23:7f:0c:5e:cf:93:
11:db:3e:57:5d:c5:42:7e:c4:c9:4a:28:57:f6:cd:
fe:38:c0:28:b5:d1:c8:e5:95:c7:cb:6c:e2:f1:84:
46:30:35:b4:3b:74:93:d6:26:9d:0e:56:81:60:06:
8c:92:6c:d7:5c:4c:e4:d1:36:8f:b2:4a:5f:14:4f:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:7F:03:4F:51:E4:25:70:B3:94:9B:3C:21:2F:F6:72:8A:F2:B7
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:4a:e5:49:d5:80:ad:40:29:8e:6b:e5:45:0b:9f:06:bb:
33:ac:50:62:6b:0e:a4:ce:4c:86:0e:39:eb:a7:5e:4f:48:ce:
3a:c2:9b:ba:bd:a3:e7:eb:58:71:a0:3f:a8:a7:0d:56:45:c1:
78:d9:93:97:ce:46:06:47:ce:ad:62:7d:aa:09:85:1f:94:6c:
44:9b:c3:0a:95:c7:f0:72:ae:78:8a:c0:d2:fc:49:cc:a7:d3:
e7:6a:0a:25:2d:3e:b5:aa:6a:82:33:13:41:38:eb:e0:2f:fe:
00:a7:53:1a:a6:8f:5d:78:d1:dd:e7:95:fb:41:18:f0:b0:69:
c0:64:4b:07:a0:4c:86:cb:5d:f6:85:d5:34:e6:30:66:64:36:
6a:7e:af:b6:83:d6:eb:50:14:e2:71:b0:41:17:e1:31:cf:ee:
81:70:a6:32:c2:c9:64:5c:9f:03:6c:26:86:10:5f:e5:18:67:
70:91:70:e5:51:8b:30:be:7e:a2:49:3d:17:c5:88:ff:0d:fb:
b0:a9:c5:88:5e:98:5f:09:1b:61:08:2c:6f:55:bc:0c:43:6d:
d5:4e:46:2b:a8:2b:c1:1f:35:bd:4a:35:03:a9:e9:5d:8e:19:
57:56:2a:2a:4a:91:04:bc:87:5c:fc:7c:bf:93:9a:9c:11:5e:
ad:d8:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:03 2025 by rpki-client