Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: bllgJ3rifuv3LM1BI4TeQCnMPYQVqedsjPNHei9kjlI=
Subject key identifier: B6:5B:A5:28:16:25:2A:F6:0B:0E:6F:83:E2:30:D5:52:05:0B:3D:52
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019895C93D192CFFE7A93AEC4B40FBA3308A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0A92
Signing time: Sun 10 Aug 2025 21:00:50 +0000
Manifest this update: Sun 10 Aug 2025 21:00:50 +0000
Manifest next update: Mon 11 Aug 2025 21:00:50 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: GlSEapUUQ8pLOVGXAX2kRL/6qKYG1QNYts9xR0dZQUE=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:3d:19:2c:ff:e7:a9:3a:ec:4b:40:fb:a3:30:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Aug 10 21:00:50 2025 GMT
Not After : Aug 11 21:00:50 2025 GMT
Subject: CN=b65ba52816252af60b0e6f83e230d552050b3d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:0c:ec:12:89:e6:3c:dc:71:38:e8:4a:7a:
c1:4c:0c:c4:7e:63:4c:3f:26:7f:48:ae:50:79:35:
98:48:93:dd:cf:bd:f2:71:fb:d8:a8:3c:92:3d:44:
62:6b:7a:17:9b:a5:13:9f:7c:96:1c:02:d8:00:c0:
77:c3:63:75:3b:b2:a2:b9:8a:9b:50:fa:4a:fe:a4:
b9:8c:f8:27:fd:da:e6:ed:5a:96:7a:c9:01:3f:61:
a5:4b:90:cd:80:fe:d4:dc:a3:18:dc:e8:13:23:5f:
34:5a:58:2b:9b:de:6d:14:36:c8:d5:b9:81:5e:0c:
62:6d:6a:f6:ce:35:6e:1c:34:47:6b:38:68:af:66:
42:99:3d:2d:3f:42:df:46:75:e4:95:8f:f1:3b:ee:
2c:99:da:0b:57:d0:2e:93:dd:c7:5d:4f:ea:49:6e:
8c:3f:c9:da:1a:cf:27:c7:54:c0:c9:fa:09:3e:45:
e4:67:a8:21:81:a1:5a:f0:51:a1:a4:0f:8b:5c:be:
ce:71:77:b4:3b:99:c6:63:eb:47:30:1e:dc:33:ed:
3b:c0:cd:5e:f1:04:30:0a:e9:e5:00:7d:bc:35:3c:
22:91:47:34:16:6f:3b:c0:e2:74:a6:87:63:17:a2:
42:6a:7b:b1:c3:d8:7f:be:5d:d9:ee:c8:c9:a6:6a:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5B:A5:28:16:25:2A:F6:0B:0E:6F:83:E2:30:D5:52:05:0B:3D:52
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:61:f7:5f:c5:47:39:7c:95:1c:94:b4:d2:4a:46:ff:9f:1b:
6c:a3:d5:4c:7c:67:ec:79:56:ae:2f:f4:29:7d:77:3d:56:d0:
2b:a6:ab:c5:b4:27:99:18:da:80:50:e2:b8:26:5e:0c:e2:c9:
6e:0c:01:93:6a:09:4a:bf:cb:a3:48:ef:a7:b0:0e:73:d8:29:
62:82:5e:08:a1:a8:ca:33:95:2a:08:34:b6:06:9f:8a:00:2d:
54:f7:b7:0c:b7:8a:e3:6b:1c:16:5b:63:9a:0c:b2:ac:fa:87:
fb:d8:67:70:39:85:17:85:ec:c2:10:d2:80:9c:17:4a:64:77:
0c:0c:92:c1:45:87:8d:f3:95:f8:73:ec:c9:5e:53:f7:5f:b8:
ad:03:7e:11:74:1b:7d:d5:9d:a8:06:61:0c:35:02:25:42:9b:
6d:b3:9d:1d:ff:9e:76:4a:45:7e:47:fe:dd:bc:11:93:7f:33:
9e:7c:9e:b0:8c:17:c0:8c:c7:d7:7e:65:46:69:b2:73:1f:eb:
87:9e:94:50:c8:55:9d:15:e2:21:2d:c5:c6:55:d1:28:41:78:
ca:89:89:99:b0:f3:ac:9b:e0:11:86:70:f2:aa:f3:57:c9:81:
0c:4a:93:64:1b:69:05:be:c9:37:9a:bd:5f:0a:82:46:98:61:
ab:3b:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:52 2025 by rpki-client