Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: AIbr94TCcwkDcDItKnxf9OpgxI68Vx31iPQZEM5KtO4=
Subject key identifier: 7F:D1:76:11:F9:72:34:F1:26:87:85:38:89:25:72:AF:3C:0E:D8:69
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 0198A04D7CC61FCA6D3FCECEF09DFAED759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1161
Signing time: Tue 12 Aug 2025 22:01:29 +0000
Manifest this update: Tue 12 Aug 2025 22:01:29 +0000
Manifest next update: Wed 13 Aug 2025 22:01:29 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: uVBpJh78w6FpCUP49QB9uHAxMNG7/pCZZD8lo08ZFPE=)
2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:7c:c6:1f:ca:6d:3f:ce:ce:f0:9d:fa:ed:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Aug 12 22:01:29 2025 GMT
Not After : Aug 13 22:01:29 2025 GMT
Subject: CN=7fd17611f97234f126878538892572af3c0ed869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:41:9c:aa:c9:83:0f:dd:8b:17:c0:eb:4d:
81:ac:0c:57:60:c3:bf:07:0f:88:ce:13:7b:35:cd:
fc:2e:7f:78:d9:e7:7f:a8:43:54:03:67:f4:eb:2f:
ea:b9:d9:78:7c:8f:91:fe:bb:01:65:dd:d9:a8:ec:
2f:66:19:f0:75:e0:2c:b7:87:4a:7d:00:34:f0:c1:
74:87:00:d8:15:d1:e9:b2:b3:80:70:54:01:cd:91:
99:f5:32:8c:93:ec:19:0f:6e:82:73:39:2e:a8:9b:
8f:5b:d1:cb:0c:1b:cf:42:70:0b:14:96:41:30:2a:
da:30:e7:a3:de:35:7d:7b:85:1f:1f:15:b3:53:8b:
75:16:65:b7:5d:c7:41:b2:30:51:9c:16:b1:58:4b:
41:ae:45:d8:49:be:2f:ad:ad:a2:4a:84:f5:27:67:
20:40:a3:38:70:81:ce:e7:ab:34:f6:be:e3:ff:f1:
1b:12:3d:20:30:94:8e:31:39:db:9e:3c:72:33:e1:
32:c3:aa:2b:72:5e:fa:20:2c:88:50:1e:13:3f:dd:
07:d1:30:bd:86:b0:cf:b0:a9:51:74:2f:79:41:24:
e4:39:65:4a:5f:b0:66:d9:35:fa:7f:e1:b8:9a:6a:
af:b1:d3:37:f1:9b:b1:fa:ca:bb:b4:8c:8b:cc:fc:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:76:11:F9:72:34:F1:26:87:85:38:89:25:72:AF:3C:0E:D8:69
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cc:3a:6f:e7:a9:ad:de:e8:93:43:c3:a5:a6:d7:0b:04:56:
4a:65:d6:5c:23:04:bf:30:c3:0f:6c:33:f3:b2:9a:51:ab:53:
30:72:6b:07:59:0f:ee:1a:a1:d9:09:e1:ba:40:ca:70:4a:b3:
2b:44:92:3b:9e:a9:5c:39:a9:a1:1b:d0:3e:71:c0:d0:27:94:
19:cb:90:c4:02:95:41:35:1a:61:68:1d:98:e5:bb:b8:86:e4:
35:a6:e7:8d:f0:14:d7:87:04:3e:09:a6:e8:6b:42:db:54:a8:
68:96:67:40:0b:f0:6c:76:87:ea:93:df:82:5e:bb:83:c1:07:
de:d5:8d:5e:2a:2a:3f:86:9c:53:39:9b:9a:1b:0f:fd:c8:46:
ac:bd:f1:15:94:cb:82:80:ce:5d:d6:4b:41:6e:87:6f:ca:73:
f0:42:ee:7f:f2:5a:71:73:89:29:96:f6:ac:f2:cf:1d:1a:a6:
29:d3:3d:7b:c5:71:f5:7c:c0:08:86:17:88:1b:2d:2a:58:c1:
1e:71:c5:bf:f5:3c:23:2a:fc:cf:ab:94:27:89:d6:57:95:a5:
57:0d:25:e8:00:a1:32:25:32:7d:02:e4:41:11:78:70:67:78:
a6:d3:10:f0:47:60:a4:a9:0f:57:21:61:9b:a8:17:ca:9d:8c:
62:fd:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:50 2025 by rpki-client