Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: VqtLZHUJlF7vk8reXA0xoYHJYIMalfjRAr6HlOXD510=
Subject key identifier: 03:58:92:46:A4:3D:24:A8:EF:D3:87:37:61:E5:35:27:82:F0:CA:D5
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0198745033D3184E5E540A9117000F37CE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:01:09 +0000
Manifest this update: Mon 04 Aug 2025 09:01:09 +0000
Manifest next update: Tue 05 Aug 2025 09:01:09 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: Afozf4mHt6rYuXbw94+vJNA7xBUzo9s2S0CHZvk8nes=)
2: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
3: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:33:d3:18:4e:5e:54:0a:91:17:00:0f:37:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Aug 4 09:01:09 2025 GMT
Not After : Aug 5 09:01:09 2025 GMT
Subject: CN=03589246a43d24a8efd3873761e5352782f0cad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1c:dc:c8:46:de:bf:1f:e9:34:3a:c7:44:5d:
7e:77:b4:2c:17:7d:f7:30:a2:b4:27:65:6f:15:39:
08:18:2f:1d:47:b5:b0:f6:c4:6b:f2:94:d8:15:c2:
48:6d:e6:fe:2d:48:f8:00:7c:01:6c:2d:3b:5c:92:
41:30:4f:29:e6:3b:08:3d:51:ab:09:ef:89:0e:0f:
c1:72:fa:ac:ea:7a:97:ca:f8:45:76:7c:32:71:2e:
31:af:01:f6:ea:04:2a:34:52:89:65:b3:ce:51:e9:
ad:21:e6:8a:d7:92:c1:75:43:dc:ca:9b:b9:e2:68:
d5:63:80:de:75:eb:3f:d6:2d:c9:ac:bf:ca:20:a9:
0b:ef:66:bd:f5:88:a3:ba:d4:b7:f7:69:75:ee:ae:
17:d7:35:a8:db:70:12:07:bf:7b:95:55:88:eb:8f:
fb:71:51:7f:13:92:ae:68:00:31:7c:cd:84:7e:95:
10:d4:58:ef:7a:5f:be:80:80:de:6b:f6:2c:dc:64:
c8:a5:7d:22:9c:b0:f6:4a:ed:e8:81:93:8b:d8:c3:
8c:0a:d3:70:dc:33:40:b9:5e:31:e0:3c:69:92:7f:
90:0d:1d:38:cf:c7:ca:24:36:86:7a:e3:67:9b:ea:
1d:d2:3b:52:9e:c1:c0:e8:28:24:7d:17:40:1d:4c:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:92:46:A4:3D:24:A8:EF:D3:87:37:61:E5:35:27:82:F0:CA:D5
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:79:1a:8e:3e:95:96:72:a1:de:3a:bc:5c:ef:a9:09:20:d7:
15:ad:b7:ba:03:3f:64:b2:a5:22:79:85:bf:cb:d9:fd:ca:8b:
92:31:e1:e4:2c:6e:3f:fa:c1:0d:ac:a1:ed:88:58:78:9c:22:
93:0d:59:85:06:37:5c:74:15:c1:71:da:d9:24:b3:98:84:a5:
16:c3:38:a7:34:53:80:f2:e1:8f:67:66:69:dc:b1:a7:14:d2:
8e:3e:a8:6b:87:5a:84:a5:b7:1e:e9:97:4a:5c:62:51:f9:23:
4b:ee:c8:dd:e5:6c:7f:1a:20:46:10:dd:e3:96:03:41:73:71:
dc:51:54:1f:a3:90:5d:d8:8a:0a:95:f7:d6:34:fd:42:be:91:
83:88:65:5b:ab:0d:9b:bf:ab:a2:d6:e5:3e:66:79:e6:78:13:
bc:fa:5b:2f:5f:07:8e:6b:85:5a:be:74:a8:23:6a:76:e2:5c:
c1:ed:d5:78:74:6b:78:e3:37:86:e2:c6:0b:db:48:e1:5a:e5:
6e:ec:29:01:68:55:3c:c5:77:fa:57:7e:88:07:eb:9e:7a:16:
d8:10:d5:b3:28:ac:20:0f:01:61:7e:28:e9:4d:89:25:bf:d1:
7e:f7:4e:48:f6:6f:00:eb:ed:11:c9:67:63:d8:95:d1:6d:e5:
ff:01:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:04 2025 by rpki-client