Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: X/RuZVHkku9zrd/8qtajS3VXcfhRJcd6Wl06RsRqnhY=
Subject key identifier: F4:06:FF:7E:19:6F:8C:2E:45:69:C0:18:BA:A5:FA:DE:56:29:0E:05
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 01988B45DE24002326E63FE2333A18A79D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 15FF
Signing time: Fri 08 Aug 2025 20:01:08 +0000
Manifest this update: Fri 08 Aug 2025 20:01:08 +0000
Manifest next update: Sat 09 Aug 2025 20:01:08 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: J3qV7vTcDnFXRAJxyvhvCkNFjTVrq/SOwc8CeowsR4Y=)
2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:de:24:00:23:26:e6:3f:e2:33:3a:18:a7:9d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Aug 8 20:01:08 2025 GMT
Not After : Aug 9 20:01:08 2025 GMT
Subject: CN=f406ff7e196f8c2e4569c018baa5fade56290e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:15:7a:86:a3:93:56:d8:c8:5e:26:c8:8d:
f8:f7:db:82:48:8e:79:88:a4:b6:19:0d:ba:a1:a1:
00:f2:cf:b5:3f:56:ae:a2:64:0a:10:4b:34:fa:67:
93:01:cb:ed:f7:3a:14:bf:46:7e:90:5e:37:4c:98:
c3:c3:00:7f:39:bc:da:f5:a7:d5:a1:ee:4a:ed:72:
71:e1:e0:1b:09:d0:7e:ab:4d:04:d6:17:82:0f:e9:
02:9d:33:4b:d3:c9:e9:14:65:a4:ea:b9:d3:16:50:
98:86:2e:26:ff:9c:e2:b3:0a:8a:26:49:f8:c6:6e:
86:0e:b1:b7:ce:90:5f:5d:3e:91:90:f6:c8:be:83:
e0:ea:71:d6:fc:7d:27:d9:95:53:db:7f:bc:b6:b7:
e9:36:9a:7c:7e:51:8c:fb:6a:92:3e:ab:b4:f2:45:
33:49:b7:63:0c:9a:85:6c:b3:ba:f9:a6:1d:dd:0e:
e0:64:e7:9c:b2:5c:1d:83:20:b9:3e:04:1e:38:7d:
6a:25:c8:77:98:44:08:76:9c:74:8c:f6:2a:c2:98:
52:d4:4d:fc:a0:c8:35:aa:cf:70:11:9d:24:aa:b6:
b6:70:0b:18:57:04:fe:33:83:f9:b7:e5:f7:16:ea:
ad:d8:02:34:14:e6:e8:d1:67:dc:6d:eb:29:a5:a4:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:FF:7E:19:6F:8C:2E:45:69:C0:18:BA:A5:FA:DE:56:29:0E:05
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:b5:1a:2a:d1:ea:42:e2:46:6b:32:47:24:b4:d1:5b:62:
61:d8:40:94:4e:d9:bf:df:08:7b:91:98:8e:90:08:07:0a:08:
80:cd:90:0f:e0:b6:24:fa:5d:cb:c8:9a:c4:b1:88:d6:2e:eb:
e9:97:b6:df:e0:18:8b:0f:eb:7f:28:2e:8e:e1:1c:dc:2c:a4:
74:88:d9:49:fc:dd:a6:c1:69:2b:6a:54:e6:a9:eb:52:e2:77:
9b:f8:c0:fa:8b:ff:a4:91:8f:69:3a:0a:24:d0:ce:36:2d:a5:
15:00:8d:68:49:8b:55:e3:97:78:f7:d4:48:1f:fd:b0:97:7a:
0a:e0:de:a3:26:65:33:6e:73:07:b3:40:8a:ff:b9:ee:a2:f0:
91:77:8d:42:a6:73:57:e6:07:37:e2:00:c0:04:6a:83:a9:d1:
52:8e:fe:7d:82:1a:fe:d0:48:d4:21:22:40:52:ed:b9:76:38:
08:9d:0a:2c:da:f7:59:2b:a2:9f:a2:df:55:d4:08:a7:4e:a7:
6f:cd:34:58:3f:30:ad:1d:9e:ee:f5:be:11:4e:b6:1f:05:5a:
bd:50:99:de:da:da:f5:27:bc:2a:2c:c2:21:e4:03:9f:15:72:
00:9a:d8:6a:a0:9b:3e:26:94:3d:b8:91:ae:b2:3a:24:bf:8a:
81:d6:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:56 2025 by rpki-client