Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: MToyR/m2Y5iHm+VLGqekjoOVd99CaPYioOqaMkWw8w4=
Subject key identifier: B0:DA:72:34:C5:CD:49:C4:58:E1:7C:3C:E0:CC:3C:A4:CB:4A:4D:77
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 01987BD2371ADF7EC7EA43585F17EE558C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 20:00:30 +0000
Manifest this update: Tue 05 Aug 2025 20:00:30 +0000
Manifest next update: Wed 06 Aug 2025 20:00:30 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: VgN2cZ8BPwrXc+YluzTggDhCURkzJ8lJvbsfmLkm6XU=)
2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:37:1a:df:7e:c7:ea:43:58:5f:17:ee:55:8c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Aug 5 20:00:30 2025 GMT
Not After : Aug 6 20:00:30 2025 GMT
Subject: CN=b0da7234c5cd49c458e17c3ce0cc3ca4cb4a4d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:7b:1d:78:85:91:ab:cc:46:6c:57:a2:52:
40:43:90:0e:f0:e0:93:a3:3c:04:eb:a8:60:2d:7f:
c0:19:49:9f:d0:9e:3a:79:dd:bc:15:7b:9e:ca:47:
64:36:1d:2f:af:93:be:6b:03:04:b9:4a:c0:d3:42:
44:9e:b4:2c:e8:11:9c:6a:86:74:76:f4:ca:5a:3b:
a5:25:2f:f8:f1:00:b8:e6:fd:50:7d:31:21:84:c6:
93:53:3d:62:5f:ac:2d:a6:a5:60:41:8a:31:5d:f1:
7f:a7:96:66:44:ab:90:fc:48:d1:48:f3:35:da:34:
86:11:4f:e6:a4:90:a3:85:50:4b:93:fc:6e:9d:2d:
4f:a6:24:10:23:8b:fb:08:e2:fc:f3:f8:73:f3:d8:
48:5a:79:76:e1:ac:62:77:2d:d1:1e:c9:9a:ea:93:
1f:ca:28:3a:09:26:92:72:94:77:3b:35:43:25:5c:
dc:f9:35:1c:56:46:fe:5b:da:66:a0:6c:c1:3f:16:
b5:7d:0e:7c:06:4a:1f:01:01:62:d9:55:74:e4:b7:
3b:e3:7f:df:a3:87:1b:bb:41:65:1a:14:71:83:41:
15:04:4a:52:11:ee:bd:ca:38:01:b8:60:28:65:2e:
01:a6:e6:e7:2e:2a:8d:8f:89:0a:84:da:a8:7d:cb:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:72:34:C5:CD:49:C4:58:E1:7C:3C:E0:CC:3C:A4:CB:4A:4D:77
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:ea:0e:bf:91:84:db:e1:3b:ca:c1:e7:0c:95:a9:0d:4d:
f0:1c:95:96:ae:29:3d:2a:34:0c:b2:a3:bb:bf:c0:20:1b:9d:
62:83:49:1b:ee:94:6d:18:60:26:72:2d:78:3e:a2:d3:68:be:
ad:b5:88:29:fe:db:2e:d3:ee:28:4f:fd:70:6c:53:28:59:69:
ac:a5:b6:07:8a:e3:bd:45:28:0a:35:16:fb:7b:ef:f3:00:05:
f8:4e:25:0c:fa:f7:1c:b0:7f:1c:51:c9:63:bd:35:a0:3c:80:
ff:29:f1:b0:e0:dc:86:bf:77:7e:7e:69:10:65:65:34:67:8f:
1a:49:fd:11:0a:da:14:84:a2:cb:a7:6e:04:75:fe:7c:ac:56:
a4:ad:02:ef:de:e8:2c:02:a1:bb:aa:56:56:76:ec:d3:84:99:
f9:4a:dc:fd:66:ab:42:4b:6f:98:e2:eb:c0:4f:a0:88:a0:e5:
83:fa:7c:c2:78:94:0b:75:f5:db:62:e8:c5:d6:23:ad:33:58:
57:68:b1:f8:d5:3a:27:16:1f:18:d2:0f:c9:e0:26:12:c6:1f:
a8:ca:ab:ec:5f:2d:c2:17:93:5c:64:cf:1a:f1:76:0a:52:1b:
01:c3:f5:7d:f4:25:cf:43:c0:02:b1:48:8f:e4:ba:98:af:6e:
7e:36:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:55 2025 by rpki-client