Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: fgaJ3eso90BgE3wCyl0q0/ANJdiDEmmNC8Z0w27f6dw=
Subject key identifier: 7F:F0:11:86:B1:58:ED:38:B1:EE:E1:2B:CA:59:15:E1:11:0E:71:75
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 01988EEB9DFA4730D3C6FFC906EF4117263F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 13E3
Signing time: Sat 09 Aug 2025 13:01:02 +0000
Manifest this update: Sat 09 Aug 2025 13:01:02 +0000
Manifest next update: Sun 10 Aug 2025 13:01:02 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: lXBUopjwckUktZdvQJScaou+US7fr1zE08ZYhqeh6Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:9d:fa:47:30:d3:c6:ff:c9:06:ef:41:17:26:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: Aug 9 13:01:02 2025 GMT
Not After : Aug 10 13:01:02 2025 GMT
Subject: CN=7ff01186b158ed38b1eee12bca5915e1110e7175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:05:df:b7:cf:2a:df:11:cb:41:f4:a8:0d:
6b:df:86:34:8a:3e:06:a7:05:ce:c9:05:6c:2f:9d:
fb:b2:e9:de:6d:b5:65:7e:a9:82:32:11:57:ba:f7:
b7:78:e0:47:71:21:1a:d1:ca:5f:d4:07:39:10:e7:
c7:ab:20:3a:a3:93:20:c6:0b:4e:6a:4e:66:ce:65:
7a:d5:11:57:6b:08:ed:17:66:83:dd:28:b7:9f:0e:
86:f5:9b:ab:ea:44:dd:6c:2e:82:ff:cd:7d:f2:43:
31:da:29:c4:30:10:5e:ad:85:f7:67:c7:cd:c9:07:
d8:de:ce:23:24:01:1e:83:41:d7:86:16:ca:3e:2c:
a5:ce:af:ae:47:4b:6a:e0:16:96:e4:77:fe:c7:95:
05:7a:b9:d5:36:b6:7b:8a:87:18:98:7c:88:6e:98:
97:57:19:31:5f:41:64:8f:a0:e7:ad:e3:a8:5b:98:
fa:1e:14:b3:a8:a1:b1:7a:bc:08:c8:6f:aa:0a:5c:
c8:9a:6b:50:c0:81:02:5f:83:8f:58:7e:26:3f:cb:
ea:43:ad:2a:8c:f3:c2:32:1f:a4:b5:aa:f6:a4:91:
50:04:23:95:4a:ef:c4:ba:09:82:a4:c3:b2:04:31:
2b:03:13:56:ea:90:d0:fc:25:05:84:bc:c1:cc:bc:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F0:11:86:B1:58:ED:38:B1:EE:E1:2B:CA:59:15:E1:11:0E:71:75
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1a:b7:dd:0f:46:dd:e6:3b:25:09:f5:5e:83:ba:ee:51:20:
f5:1f:ca:7e:13:f8:26:56:3b:f1:53:e8:e1:0b:fc:5c:58:74:
a0:71:21:c2:bd:1e:48:f1:7e:32:98:3c:56:75:a4:96:7c:a3:
ac:dc:cc:7f:4b:c9:3b:68:52:49:b3:a5:7b:62:a5:03:b2:f6:
30:4d:89:79:0b:58:ce:78:a6:f1:5e:66:66:7c:41:ba:a3:42:
02:b8:62:95:e1:b7:32:4e:22:eb:a9:68:3d:b6:31:49:e3:9f:
95:8b:a8:6b:7a:77:cb:cb:0e:8b:33:9d:21:a8:b2:bc:c6:61:
d2:14:49:2a:30:19:7a:2d:b6:54:dc:82:d5:74:41:39:11:7e:
52:2d:74:ae:0e:2c:a4:7c:40:b7:a8:76:fe:fb:da:1b:89:0f:
9f:12:4c:09:17:3a:14:a6:44:5d:10:55:dd:53:af:99:b5:ba:
a8:b2:0c:00:65:d7:0e:19:c3:95:b8:f5:17:1e:26:7c:28:04:
ed:fe:c9:9a:ff:69:ce:96:b2:cb:b1:f6:ed:e0:49:fa:a1:87:
b8:ca:4e:2b:41:50:46:05:17:c9:80:85:51:cb:57:74:41:77:
7e:07:4e:32:5a:96:19:96:91:a0:58:65:2d:42:5c:14:f1:0e:
01:14:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:26 2025 by rpki-client