
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: Wxh70Y+nCum97WzxpT2xjeQpKh2xIKpIkD1qZIidrV8=
Subject key identifier: BA:A2:E2:D9:4D:FF:34:42:3F:1F:3B:41:6B:8F:1A:D1:C0:6D:A5:8C
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 01987DF7E06F30F6D6E49E3212696158C486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0E9D
Signing time: Wed 06 Aug 2025 06:00:53 +0000
Manifest this update: Wed 06 Aug 2025 06:00:53 +0000
Manifest next update: Thu 07 Aug 2025 06:00:53 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: tfrF40imNsEu89QK7Sk70w7gMcRTX49o2W1c6jbXEJM=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:e0:6f:30:f6:d6:e4:9e:32:12:69:61:58:c4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Aug 6 06:00:53 2025 GMT
Not After : Aug 7 06:00:53 2025 GMT
Subject: CN=baa2e2d94dff34423f1f3b416b8f1ad1c06da58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:39:ca:e3:5e:59:49:55:06:5b:f3:4b:42:
56:6d:db:ca:a2:06:ff:58:dd:49:57:39:82:c1:9f:
6d:ce:cd:bb:47:cb:15:ca:d7:71:b9:9e:8f:21:bb:
be:44:de:17:9b:e3:60:ed:a8:38:ac:38:d4:89:90:
fc:c2:20:9d:d3:7e:9f:d0:8e:d2:a9:15:4d:f4:fb:
21:6b:c1:58:bb:42:fb:25:79:ad:a2:3c:93:c7:96:
7e:c0:2b:74:4c:bf:b4:23:2e:80:69:dc:78:67:46:
90:49:bd:14:8d:97:47:6d:2e:8f:e6:f1:09:28:69:
ab:3d:9e:da:95:3f:51:61:5c:e9:aa:5a:27:00:14:
43:13:f7:38:ee:61:b9:75:57:a4:3d:7c:ae:17:5d:
4e:cc:f4:16:7a:4d:0d:2b:70:ea:1e:95:dd:23:15:
06:69:55:38:6f:b4:20:17:cc:4a:cf:c8:d1:dd:0a:
00:bd:20:5a:de:e6:00:02:ee:87:1e:c3:09:db:5a:
9e:9f:fc:54:a6:d3:de:1e:de:34:66:cb:77:7a:fe:
d8:71:92:06:a7:dd:a6:aa:5b:cf:8f:4b:12:e0:11:
c0:1b:8c:99:98:30:9e:ed:27:20:cf:81:e0:83:5c:
d7:52:ac:24:b1:e4:93:7f:80:e9:0f:a5:09:76:2a:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:E2:D9:4D:FF:34:42:3F:1F:3B:41:6B:8F:1A:D1:C0:6D:A5:8C
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:54:2a:d6:54:fa:ad:93:3e:65:b1:7f:d6:79:7a:f1:15:
0d:6f:d7:60:7c:4f:54:05:45:63:6d:4e:2e:0c:31:04:99:82:
12:3a:d2:07:0e:01:92:43:fd:1a:b7:fd:5f:a6:c7:38:1e:5c:
aa:1a:75:b2:9c:35:51:8b:51:4a:ea:c1:26:c2:5f:b1:d1:2e:
7a:fa:88:6c:e9:e3:00:b8:00:54:66:fb:34:32:90:4a:a1:2e:
65:08:37:e2:ac:64:b4:79:75:00:a5:43:5d:ec:42:9d:d3:cb:
50:8b:3f:ea:60:07:c3:05:74:86:34:e8:52:21:ac:de:84:c2:
81:c4:c8:21:1c:cb:92:d6:b7:df:e4:87:94:5b:61:63:dd:2e:
e0:dc:4b:c9:1d:b0:dc:16:1c:a0:de:c5:ff:08:bc:46:95:75:
a0:c2:f0:1f:6a:42:7b:51:76:a4:a5:1f:e2:11:a0:e3:a3:9e:
7b:bc:73:88:9f:ed:58:fd:04:17:42:03:56:63:fe:1a:b0:30:
2c:2e:43:49:64:60:9d:ab:3c:ba:d3:4b:a2:28:0e:8c:a9:63:
e1:da:ad:54:9b:4d:df:c3:2d:5b:70:32:07:e0:99:1a:05:be:
1d:18:4c:43:86:e5:a7:90:a1:9a:7b:ce:d5:77:9d:75:1f:66:
67:23:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:29 2025 by rpki-client