Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: zr3LephFOzVaFPbnR5JVAJ2R252epvHftjLAjJeyK/I=
Subject key identifier: 37:09:C8:4E:B8:F6:B5:C7:C2:07:A8:09:9A:35:83:30:DF:7C:0F:AC
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 0198868D6C9E527E13B16AC4C52201D4F2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 3B
Signing time: Thu 07 Aug 2025 22:01:11 +0000
Manifest this update: Thu 07 Aug 2025 22:01:11 +0000
Manifest next update: Fri 08 Aug 2025 22:01:11 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: HVCCcMU/e+Qx12Ld2P4A/zUVYoZMyw/b8xA1aOTR6pQ=)
2: L3NuWTe_ZTmjBo-VlxbB6Itqb5c.roa (hash: 1CPUHzNqQbUf2XOYArYRqgpqG1Ievq6YnuLxsGd4YuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:6c:9e:52:7e:13:b1:6a:c4:c5:22:01:d4:f2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Aug 7 22:01:11 2025 GMT
Not After : Aug 8 22:01:11 2025 GMT
Subject: CN=3709c84eb8f6b5c7c207a8099a358330df7c0fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:a6:b4:83:d0:84:3e:b5:5b:42:db:72:9d:
66:81:6c:59:bd:bf:ff:dc:88:90:de:de:42:d5:18:
0f:3e:fc:20:62:01:52:6e:91:dd:5f:c5:70:60:bf:
35:7c:85:1e:de:01:33:26:fc:fe:b0:7d:69:9d:33:
99:e7:f1:67:2a:fa:5a:f4:7e:a3:bb:dd:6a:33:5f:
71:97:ad:6f:10:52:56:f7:76:8e:1f:9b:5a:94:53:
30:c2:ac:01:ff:76:14:3a:c6:f0:c1:1f:55:a0:7e:
95:29:8f:8e:4f:ec:c9:38:75:c4:6b:f5:62:e4:fd:
e6:ba:f1:69:fa:98:94:df:4f:86:26:a6:7a:13:8a:
f1:be:1a:4e:f0:76:55:fc:30:c9:e1:bf:8d:af:0c:
50:fd:b4:1e:6b:f4:1e:b9:c4:f3:d3:19:e1:e1:8e:
d9:73:1a:03:14:16:41:ac:22:6c:6d:dc:ef:1f:ff:
8f:ff:c9:af:37:52:18:96:bc:f9:ad:0a:f1:76:fc:
c3:d4:7a:46:2e:4f:46:78:fb:b0:14:2f:0c:a7:87:
42:7e:0b:25:38:a0:7a:4a:a4:90:78:bc:9c:5b:ce:
15:c9:52:bd:37:2a:80:a4:a7:91:a2:52:85:01:98:
9e:8d:89:58:0f:3a:b1:b9:d9:43:51:31:fb:ce:61:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:09:C8:4E:B8:F6:B5:C7:C2:07:A8:09:9A:35:83:30:DF:7C:0F:AC
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:25:ad:b4:a7:7a:c9:a6:fa:31:87:a9:f5:8d:be:c9:1e:2d:
4c:34:b4:b8:99:1c:a4:3f:db:94:4d:1e:f3:8b:47:b8:3a:78:
41:19:76:f3:c7:9f:fd:10:d7:bd:88:69:34:05:49:06:f0:df:
3d:96:12:7a:a8:51:e1:db:3a:91:51:90:eb:98:78:a7:c4:b9:
1a:ac:d2:7c:95:5d:6a:bc:19:5b:25:a9:89:72:57:36:0a:98:
b2:01:35:83:a9:76:1d:93:1a:f7:ac:34:ba:cf:ba:28:8d:bf:
d3:99:37:ac:3f:45:81:0f:e8:a0:c5:62:ab:d2:10:ad:0e:93:
cc:dc:f5:ef:2e:c2:77:7f:b0:9c:0f:d0:86:6d:61:21:8d:19:
22:9c:5a:de:6f:e9:b6:02:5b:1d:e0:7e:05:69:94:8e:86:42:
ce:bd:b8:e4:fb:e3:00:7c:da:7c:95:2b:94:5d:fd:4e:d3:35:
04:1a:c7:90:bd:c7:50:c2:3e:d0:77:b4:e0:bc:5c:12:f9:2f:
7d:cf:8d:e9:e7:59:74:b1:b9:fe:1f:65:83:b3:b4:e9:86:ff:
87:5f:24:79:b6:ff:b8:97:10:f3:cd:99:3b:55:77:16:a4:ae:
15:0c:78:eb:70:bc:34:b7:37:4e:f3:09:86:b3:6e:00:14:1d:
d6:6f:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:01:26 2025 by rpki-client