Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: Gf/QHJ5tE/p9YgUMhorZRDguLVwxoHg+bghjGkynO+4=
Subject key identifier: 29:3A:FF:65:86:22:2B:32:D6:25:A4:B7:CF:B1:9C:E6:31:AC:53:15
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 01989F03A3834267CAA249DB05745E161B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 03A5
Signing time: Tue 12 Aug 2025 16:01:12 +0000
Manifest this update: Tue 12 Aug 2025 16:01:12 +0000
Manifest next update: Wed 13 Aug 2025 16:01:12 +0000
Files and hashes: 1: KIBPt_IHF6y4uJMTevu1k0aU37E.roa (hash: xnu5MWsk10XHvOorhDM/6K8KY5BqTo0pp6Ckq1C4ML0=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: jTeF5EDqAJyXav9b8IL5YGzop4ROJOQWPtlkQgPrJ4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:a3:83:42:67:ca:a2:49:db:05:74:5e:16:1b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Aug 12 16:01:12 2025 GMT
Not After : Aug 13 16:01:12 2025 GMT
Subject: CN=293aff6586222b32d625a4b7cfb19ce631ac5315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:77:a1:fe:35:68:91:8b:bc:b7:64:2e:8f:
0e:38:fe:2b:09:ca:26:97:3e:08:de:7b:a9:cb:e9:
6c:fa:78:41:41:69:3a:aa:6a:a2:db:6a:cb:ac:79:
87:ec:5a:fc:78:a0:1c:da:cc:04:06:b1:4c:ab:fc:
1e:ba:15:4a:54:77:65:61:60:6d:dd:a1:8f:60:72:
7c:88:95:b6:67:be:65:92:f4:c6:8a:75:cd:87:15:
0a:48:2a:c7:a2:f6:61:11:67:d0:e8:b9:d9:10:9f:
93:4b:0b:cd:c6:22:58:91:7d:46:99:eb:a4:dc:aa:
8a:65:35:45:6c:4d:b6:9e:3e:38:39:30:4b:5b:10:
3c:40:ab:56:c6:ba:77:b3:b1:f9:f2:ec:74:9a:e7:
fc:c9:75:83:87:b6:4f:2a:ad:45:5d:b9:f4:dd:bf:
c5:f5:f5:6a:c4:e8:2d:d8:17:78:78:ff:8a:2e:d2:
5c:ce:c2:79:0c:ed:68:3e:b9:0b:fc:9d:25:fc:a4:
8c:aa:f9:3d:9c:ae:d7:40:7f:c4:65:ff:69:3d:4c:
1e:a7:0e:06:94:50:f3:36:88:62:a5:70:1f:9a:4e:
db:be:d9:0a:dd:56:05:a8:9b:94:6f:5f:62:fc:a0:
ce:9d:cb:52:cb:9d:7f:f0:e1:36:f9:1b:9e:e1:27:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3A:FF:65:86:22:2B:32:D6:25:A4:B7:CF:B1:9C:E6:31:AC:53:15
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1f:c8:c1:22:08:2b:2c:8e:ab:aa:53:c1:b2:73:9b:d0:a6:
fb:ae:11:1a:df:51:0f:36:05:2d:f5:71:8f:6f:d4:ba:65:fc:
4d:84:99:1d:ec:f7:13:e6:0f:09:25:9e:7e:2a:ff:1d:59:e9:
5a:ea:26:15:9e:e2:8f:60:b8:19:a7:f4:2c:77:2f:ea:17:c9:
4e:f0:0d:81:5c:75:0d:cb:0e:a1:bc:6a:15:e5:e8:00:60:5a:
64:d1:4e:0e:2e:f0:e7:3f:91:10:3a:0c:76:29:60:54:d5:65:
11:81:f7:4e:81:e3:f4:86:6f:06:3d:dd:11:2e:2d:2a:7c:13:
57:fe:41:ae:f9:5f:cb:f7:66:62:0b:07:36:60:4e:3a:87:37:
5f:56:b1:96:0f:f0:5e:21:5d:a3:25:c5:8b:e3:63:8f:2b:b0:
ba:45:58:0b:31:28:cb:3a:45:c1:11:7f:31:0e:49:ea:41:9e:
58:a4:84:94:90:0c:da:57:dd:44:6b:30:df:08:64:e6:ba:2d:
8b:c0:ab:16:db:e3:2b:d0:bb:89:be:37:b3:f7:71:39:99:b4:
52:5f:ff:6d:96:a7:9e:62:46:5a:75:12:e4:54:cf:ef:61:ae:
14:9b:a1:a7:90:6c:bd:70:11:a3:6f:d7:0b:62:ca:78:d6:53:
8f:3c:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:11:10 2025 by rpki-client