Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: nHCo7jZ5iPwlrL38VsYsTtbubBuANw3otd3gri7LHZI=
Subject key identifier: 70:98:75:BA:1F:0E:65:63:AD:B0:3F:F0:1D:A5:E1:1A:CA:A1:CF:95
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0198819E01AF4FBB25FA6E2D775C40197758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 23:01:12 +0000
Manifest this update: Wed 06 Aug 2025 23:01:12 +0000
Manifest next update: Thu 07 Aug 2025 23:01:12 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: bcI3hL6YT3yp7sQ3wl22V0vgw/udamNZIeBMHyxTJuw=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:01:af:4f:bb:25:fa:6e:2d:77:5c:40:19:77:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Aug 6 23:01:12 2025 GMT
Not After : Aug 7 23:01:12 2025 GMT
Subject: CN=709875ba1f0e6563adb03ff01da5e11acaa1cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:18:8b:bc:8f:12:fb:16:5d:a2:88:bc:94:a6:
b0:1d:b1:e5:e0:df:59:6a:bb:06:c1:d1:d1:81:e7:
9b:8d:a2:f9:d7:f8:36:4e:fb:58:af:cb:ac:d1:54:
ce:de:25:56:fc:e5:f6:ce:37:2d:5a:96:47:70:e9:
94:5d:da:54:95:bb:85:8e:e9:54:68:28:8c:d9:51:
4c:c5:62:5b:91:45:29:12:c1:64:75:b8:40:d9:f0:
8e:b0:96:da:43:b0:f0:e3:f3:c5:c2:7f:17:3a:29:
6e:a4:20:aa:9d:d2:05:96:28:a1:b4:be:89:a4:73:
74:e2:d0:3d:2b:68:cf:66:6f:01:cb:2a:bd:91:3d:
65:d7:de:e6:18:2b:4d:d0:85:1b:42:67:0d:61:98:
bc:6a:df:9f:e5:6d:63:7c:65:7d:ac:ad:d2:a1:fc:
b4:4e:de:c7:49:53:bb:fa:19:5f:e9:e4:99:a1:b2:
9c:13:48:5b:bc:85:13:01:45:61:e3:e3:cf:7b:b2:
44:af:a3:32:66:3c:66:44:f8:d6:9c:84:a3:63:3d:
46:36:e4:ed:07:29:de:32:2b:20:1c:0c:a8:5c:96:
33:26:0b:4e:cc:64:3c:48:29:97:d9:5c:f9:1b:cf:
88:72:09:78:6e:f4:39:08:bf:dc:da:86:26:7e:fc:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:98:75:BA:1F:0E:65:63:AD:B0:3F:F0:1D:A5:E1:1A:CA:A1:CF:95
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:a2:f6:7c:81:06:0b:81:a8:a3:35:12:81:95:89:86:41:
0f:36:fa:e1:4d:d1:56:53:65:9d:f1:00:52:1b:ba:e0:c9:bd:
05:6b:c0:2d:0a:d9:22:f9:9a:74:76:5b:91:94:70:1c:1e:03:
bf:aa:44:5f:0d:0a:fd:c3:03:7f:68:9e:3a:05:25:2b:10:23:
ec:07:ce:a2:26:1a:0b:a7:bb:c4:95:e7:9b:2d:34:79:1b:5d:
89:f7:b9:a4:6d:92:c1:d0:ff:86:04:ca:1c:43:82:0e:5b:f1:
26:80:95:5c:a6:6d:dd:26:af:40:ff:e4:7b:f2:9c:d7:c4:6b:
fd:76:d8:d8:c8:18:83:14:10:1c:b7:ef:57:9d:7c:59:7d:07:
5a:e7:94:17:5e:48:98:6d:57:96:ac:f3:4c:f2:1b:fd:5a:26:
14:11:3b:e0:5f:5f:1f:b1:91:92:8b:c6:57:36:1a:ad:bb:c3:
27:f5:9e:70:f4:2e:98:de:ea:38:36:0f:b7:74:8d:12:3b:e6:
44:5f:ea:e8:42:09:e2:17:d8:c2:3f:91:10:86:d4:db:93:1b:
c9:d9:1f:06:80:86:38:27:b1:86:09:f4:cc:1f:60:49:b9:f5:
e2:2c:37:9f:03:fe:ae:40:bf:e5:b2:07:9c:0d:e4:62:51:4d:
ea:41:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:46 2025 by rpki-client