Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: oc7MDmWu/ik0K+3/it9q69pKeXSafLvaX3Doj116dSw=
Subject key identifier: 48:E9:F7:64:9C:C2:2A:FE:90:8C:2C:CB:C6:EA:00:08:69:A7:BA:A6
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019891B59351CD30E2F30FA54CA4E178ED2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 067D
Signing time: Sun 10 Aug 2025 02:00:52 +0000
Manifest this update: Sun 10 Aug 2025 02:00:52 +0000
Manifest next update: Mon 11 Aug 2025 02:00:52 +0000
Files and hashes: 1: 1tilC1_jin8srVsrV1j052DulGk.roa (hash: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=)
2: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: xU4gWE4ZFOAb+b0h5sY7ub1B4FKR6pX4sVUFcXoRF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:93:51:cd:30:e2:f3:0f:a5:4c:a4:e1:78:ed:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Aug 10 02:00:52 2025 GMT
Not After : Aug 11 02:00:52 2025 GMT
Subject: CN=48e9f7649cc22afe908c2ccbc6ea000869a7baa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:d2:f2:8d:1d:9f:27:8b:9c:39:e6:23:96:
36:1d:33:3c:ef:05:ae:3d:dc:69:d0:41:fd:0f:f6:
ca:22:8f:a2:ca:8b:e7:96:9a:0a:4e:3b:35:e6:64:
89:70:bd:f2:c5:11:90:6c:9b:86:c4:28:0d:50:bd:
c0:5d:1b:59:9c:43:f2:2e:ee:ee:21:76:fe:76:97:
c3:4e:cc:50:ba:06:22:b4:4c:fb:d0:bf:cb:50:56:
f0:1c:75:00:36:95:ab:bf:fc:72:76:d9:0b:32:38:
3e:b9:a4:a8:b3:13:c0:40:9f:8b:91:c7:59:49:28:
d6:b3:a7:8f:b7:ec:47:15:a0:f7:75:3f:9a:ce:87:
cf:18:87:bd:07:cc:d9:bb:bb:14:97:2b:4d:79:46:
38:cf:eb:f8:08:92:c2:16:44:7e:c4:81:bf:62:62:
b9:81:df:a8:a4:6f:e8:12:49:a8:d1:b4:1e:d0:ae:
20:ec:e7:ef:fc:71:05:4f:59:91:73:34:e0:c4:c2:
73:df:46:b5:1e:b6:cd:db:9f:bb:29:fe:b1:cf:69:
ec:24:07:1c:a5:de:73:a1:0e:69:56:d6:70:28:2a:
5f:bf:81:7e:bb:8e:27:e4:e5:5b:1c:17:ed:5b:15:
d2:a7:99:be:21:4f:0f:1d:44:63:32:78:4a:a0:a2:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E9:F7:64:9C:C2:2A:FE:90:8C:2C:CB:C6:EA:00:08:69:A7:BA:A6
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ea:57:20:19:4a:d1:aa:ca:e0:6e:eb:91:22:4b:f7:a0:c7:
f7:d4:c1:3d:ad:11:a7:79:83:28:fe:ef:1c:a6:e5:4a:33:a9:
36:ee:19:ec:3f:3d:82:2a:0b:14:67:30:ed:5e:46:17:e8:fb:
8d:e8:b9:70:f8:82:77:7a:58:a6:35:33:48:68:4a:25:82:54:
07:fb:01:5e:96:55:4e:3e:95:b6:52:65:06:d7:ac:85:33:b0:
4a:ff:b4:c3:31:75:cf:4e:51:3f:5a:69:32:26:13:0e:c2:1f:
98:e8:68:48:62:36:ed:b9:c1:ec:44:bf:51:b1:50:18:40:7f:
b2:6d:30:ff:d4:40:c9:5b:ab:15:c5:b5:d8:0f:ac:d0:e9:12:
41:27:95:d7:ea:7f:d3:1a:9f:31:bb:48:8c:64:bf:ab:98:85:
1f:10:fe:a3:92:19:34:31:b9:2b:39:6e:00:a6:7a:49:58:7a:
68:2b:e3:7a:cf:56:38:9e:b6:14:3e:e4:e8:5a:98:56:e3:91:
81:f2:32:30:03:0b:59:da:4f:92:72:54:5b:1b:7d:21:05:e2:
c3:8f:81:24:44:1c:6e:2f:0d:ba:5a:39:10:b8:fc:71:b2:61:
df:e8:dc:f5:8b:01:0a:ec:6f:9a:d3:d0:c5:25:83:5e:de:57:
1c:96:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:18 2025 by rpki-client