Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: wyZ5jJlJu0iwlmpLkU+DhtgPMdJbJiQ7zITvK6HjGKU=
Subject key identifier: D3:4B:A0:A7:69:B1:47:AA:58:45:19:46:D1:86:A7:4E:61:0C:07:C4
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 0198922303885182D21669071A8B892F61E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0CBE
Signing time: Sun 10 Aug 2025 04:00:24 +0000
Manifest this update: Sun 10 Aug 2025 04:00:24 +0000
Manifest next update: Mon 11 Aug 2025 04:00:24 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: vqLPp1oaPu04/bfcxnpU6PbTDlghOjwwo1daP0Cp59w=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:03:88:51:82:d2:16:69:07:1a:8b:89:2f:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Aug 10 04:00:24 2025 GMT
Not After : Aug 11 04:00:24 2025 GMT
Subject: CN=d34ba0a769b147aa58451946d186a74e610c07c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:5b:ff:f7:83:8e:64:90:61:d1:52:fe:48:
fb:89:fc:ea:87:12:e5:23:97:f7:41:01:81:35:fa:
35:bb:53:39:90:6f:bb:45:81:31:de:e1:e4:67:ba:
90:66:b4:72:35:5f:aa:36:9b:e0:9f:21:f0:f2:82:
74:f8:70:61:7d:96:b7:10:c0:db:6b:d1:71:81:30:
69:b2:75:ef:65:19:73:72:38:f9:2f:eb:72:50:2d:
ad:55:46:68:61:1a:ba:b4:9a:2a:f2:74:a5:ce:b8:
24:c2:5d:97:0e:6a:d4:e2:45:73:1b:b0:ae:92:95:
74:42:83:a7:8d:0c:7e:75:96:1e:54:60:e4:8a:fc:
a5:bf:da:17:c1:21:0f:3d:1e:2a:4e:8c:20:2c:58:
83:31:3a:2c:ce:a9:45:8f:9c:a4:c8:7f:ae:a0:d4:
6d:95:97:29:01:66:f6:cb:9e:89:c4:34:eb:94:31:
15:03:2c:bd:e2:57:64:54:bc:5f:22:70:18:13:c7:
de:7e:a7:0f:4b:2e:a9:aa:9d:60:f0:6c:fc:fb:6e:
a1:64:c5:a4:e7:86:40:4d:93:f5:e2:cb:b7:6d:af:
23:2b:dd:7e:fe:93:97:4d:35:7e:99:a1:97:1d:18:
b8:57:2c:9e:7d:76:55:90:10:97:f8:f0:1a:7f:f0:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:A0:A7:69:B1:47:AA:58:45:19:46:D1:86:A7:4E:61:0C:07:C4
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:95:a7:3d:9f:b1:ba:17:1c:4d:fa:1c:32:06:1b:72:2e:92:
19:b5:14:3d:35:26:89:f7:76:f8:bb:40:18:a9:63:28:33:22:
10:47:eb:57:5a:1b:40:1c:b3:f2:05:86:d4:fe:52:57:59:92:
95:af:ff:d7:45:d6:85:96:2e:cf:d6:b4:2a:b6:ba:39:cc:21:
dc:a6:11:1e:d3:62:75:8a:86:90:7f:ac:4b:a0:57:9e:01:0d:
cf:1a:86:7d:77:06:31:e0:c1:44:fd:78:92:0e:2f:20:7c:5d:
cf:2a:d2:7a:a5:e0:fa:7b:18:1f:7e:47:98:3b:64:4c:cc:04:
81:e0:33:9d:fd:09:fa:b5:2a:47:7e:fa:cd:7c:41:5c:3e:41:
f4:d4:b5:3a:13:b4:83:a9:c4:f5:40:a8:17:2e:ce:41:94:37:
48:dc:eb:44:cd:48:60:d0:df:38:59:66:30:5c:40:3b:65:aa:
20:9b:8e:b7:8a:0f:ed:dd:7c:ae:fe:36:5f:cd:62:6a:51:e6:
7a:73:25:8d:1c:b2:bb:fc:ec:e7:19:fe:ff:c8:14:9c:f4:e7:
86:41:4f:ae:b6:ba:c9:f2:d0:ec:22:28:4b:fd:04:6f:88:af:
f6:63:c5:3b:a3:30:4e:a8:77:cb:61:e6:23:12:ba:47:18:f5:
9d:50:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:57 2025 by rpki-client