Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: vMX3UXmaKftL7ksntVkmKkBSwCwe13YhXY2VoQ/IQHw=
Subject key identifier: 35:59:D6:A1:D7:C5:6A:A2:2B:5C:FA:BC:D5:1F:5A:4C:D4:26:56:67
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01988F22249B883AF58016D194B7E42F17C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0EE1
Signing time: Sat 09 Aug 2025 14:00:36 +0000
Manifest this update: Sat 09 Aug 2025 14:00:36 +0000
Manifest next update: Sun 10 Aug 2025 14:00:36 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: OoDHKHbIEZkaGWXNYhmLePNUWigBCnyxoG7k5cUKzII=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:24:9b:88:3a:f5:80:16:d1:94:b7:e4:2f:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Aug 9 14:00:36 2025 GMT
Not After : Aug 10 14:00:36 2025 GMT
Subject: CN=3559d6a1d7c56aa22b5cfabcd51f5a4cd4265667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:17:40:5d:f1:28:2b:b9:2f:d4:1e:fa:6a:
4a:72:c5:7f:fd:06:11:7f:83:57:3d:8b:d3:c0:77:
d5:28:7c:34:bc:5f:87:07:0b:f5:b2:e5:74:cd:f8:
40:bb:c3:a7:5c:4a:93:e7:f9:11:de:e2:23:42:4a:
5c:0c:9b:3b:96:fd:47:28:5f:83:db:7c:c6:75:33:
b2:39:c6:2f:d2:f8:fe:89:79:92:c8:21:eb:ba:a6:
ec:ee:39:86:dd:5a:34:d9:91:65:04:00:1b:34:44:
bc:97:1b:ed:ab:d8:87:61:ce:eb:a7:92:d2:6a:b1:
fe:7f:61:bf:a2:d6:e4:47:de:97:95:7b:ab:2a:3c:
97:f0:d8:00:dd:a6:de:d4:b4:ca:49:db:96:12:38:
72:b1:6f:7d:66:2d:21:3c:07:b4:d5:b8:71:a1:50:
19:64:07:77:61:4d:76:fe:d4:e1:f5:93:d5:0a:38:
9c:07:5e:91:3c:38:53:d4:01:55:9d:f5:da:b2:2d:
44:cb:0a:f9:d2:72:24:63:40:b4:98:a3:16:ac:64:
33:b0:2e:5c:81:c7:5e:4d:91:14:57:3e:4b:e7:16:
f1:ce:d5:f3:39:17:ad:5e:fa:e2:7d:22:f7:70:ba:
95:1e:4e:2b:bb:ac:00:67:b4:d8:f6:29:6b:76:e7:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:D6:A1:D7:C5:6A:A2:2B:5C:FA:BC:D5:1F:5A:4C:D4:26:56:67
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:88:3a:e7:f1:9e:e5:0c:06:dc:db:9a:b5:90:81:71:12:
69:9b:fd:09:1f:73:fc:2a:c4:0f:f4:b5:07:5e:0d:42:ce:c9:
4c:4b:23:71:8c:a2:b1:ae:69:42:cd:6e:54:6a:c2:2a:a1:b9:
c6:61:a6:15:22:ba:f6:18:a0:56:4a:43:6a:5b:ad:15:01:be:
0e:b5:0a:ff:2c:1a:23:4f:62:09:07:4a:df:45:65:80:86:de:
dd:46:3d:3d:09:aa:06:9c:87:a3:6d:17:65:42:67:39:5b:be:
ef:f6:67:2b:af:66:3e:4f:3d:4f:c5:6e:47:4b:f2:11:09:6b:
7f:76:89:f0:78:66:df:6c:8a:52:26:89:30:8f:fd:b5:4d:2c:
de:59:91:53:4b:c7:5a:db:0a:b1:a6:05:0b:b3:16:30:63:88:
cf:a1:4f:5c:78:3e:79:44:83:a2:0c:50:70:03:ea:09:56:e1:
b2:78:49:ec:a3:bd:c4:5f:7b:c3:19:c5:63:21:49:47:57:17:
64:30:50:40:da:ed:0b:93:a4:47:b4:8e:f8:8e:40:77:b4:c8:
2f:14:89:5e:b7:95:af:95:d5:78:5e:4d:7d:73:22:74:39:d7:
82:6a:75:43:13:cb:f7:cd:2d:64:36:60:06:71:61:5d:78:da:
60:84:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:52 2025 by rpki-client