Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: yVbfIVzRwFAtDudFfBiyNisOrl8g/f4pwYiavV3glyE=
Subject key identifier: 7B:CF:AC:AF:60:5F:9D:67:AF:CD:9B:BC:F1:C0:A3:70:64:CC:92:32
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019872CFB857474218D36EB22B23E90EF741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0F59
Signing time: Mon 04 Aug 2025 02:01:12 +0000
Manifest this update: Mon 04 Aug 2025 02:01:12 +0000
Manifest next update: Tue 05 Aug 2025 02:01:12 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: 6lNuaDlDTDHMAZ1t0y7HLcpHHPGOrJNaJ6qn1krhu2E=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:b8:57:47:42:18:d3:6e:b2:2b:23:e9:0e:f7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Aug 4 02:01:12 2025 GMT
Not After : Aug 5 02:01:12 2025 GMT
Subject: CN=7bcfacaf605f9d67afcd9bbcf1c0a37064cc9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:ec:24:27:ac:47:36:b3:39:cc:a0:4d:ca:
67:d6:be:4a:74:16:63:dc:09:99:0f:3f:97:e1:59:
cc:5e:29:fd:db:52:83:1c:ea:35:02:10:fc:c0:e9:
4c:1e:b9:3f:99:74:9d:6e:9f:79:3e:53:cc:1c:64:
c9:08:e0:34:81:fb:df:49:01:a2:0c:47:df:68:a8:
13:9c:23:23:78:d5:d0:90:4f:8e:1a:c3:a1:1b:66:
12:ee:6a:28:2d:8e:f2:a5:80:13:7f:60:e5:e8:fc:
bc:6e:8c:1e:ab:25:ad:66:ce:20:f3:39:78:f7:5f:
80:b2:a4:42:10:43:05:4b:ef:65:1c:c4:33:f5:56:
85:e2:04:8f:1a:f3:cd:83:b7:33:a2:38:bb:bf:09:
55:e6:3f:51:65:10:bf:46:16:72:0a:d3:78:2b:53:
f3:86:9b:e4:1b:a4:ef:6d:ae:3b:85:b5:f9:a3:a3:
e8:50:1f:a4:7c:56:7a:9a:88:0e:bd:c3:cf:57:af:
ab:ac:5b:d4:24:0b:c9:08:c9:90:a4:83:ec:50:0a:
17:be:ec:f3:e1:a3:55:76:50:cf:84:73:0b:e7:54:
4f:f3:5a:29:b4:a8:a7:f4:b9:be:22:32:d4:3b:19:
71:d4:bc:7c:2e:df:27:34:32:26:b7:39:c6:c2:65:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:AC:AF:60:5F:9D:67:AF:CD:9B:BC:F1:C0:A3:70:64:CC:92:32
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:93:92:78:94:16:c1:b2:56:94:e9:db:a8:5e:e3:7a:f9:
ad:3c:e1:69:c3:58:02:60:e3:39:88:29:49:8b:1b:ab:ce:0a:
98:2c:7a:62:ae:7d:d0:1c:f6:4c:72:60:75:fb:06:7a:8a:a2:
13:94:c9:b4:39:62:48:78:02:7d:89:0d:9c:7e:fd:1e:27:1f:
dc:0c:96:35:6d:a8:b6:79:f2:32:41:ee:82:41:88:d2:04:7d:
92:16:bf:b9:ce:eb:67:b8:0c:42:b4:bc:78:c6:ab:c1:8c:46:
d6:dd:ad:57:43:81:2d:31:59:87:7f:d7:83:0f:14:c3:db:e5:
a9:17:a9:40:4b:fb:dd:5d:24:e1:fe:83:95:2b:65:78:aa:c5:
9a:40:24:c7:9c:d8:8b:52:1d:c5:bf:1c:07:98:f9:1b:9d:4e:
14:e5:d0:5b:f1:ac:53:70:42:f4:d4:1e:17:5b:6d:32:2b:e3:
12:66:35:1a:0b:f8:de:a3:8c:64:db:e6:17:a5:be:ae:11:d7:
17:5f:90:90:03:ee:52:64:3f:42:d3:21:e5:9a:bd:49:73:55:
4c:4e:6e:76:a3:03:8c:e2:b9:86:bd:f3:a3:b3:50:04:21:a5:
f6:d2:29:8f:16:7f:ce:e7:c7:2f:c8:79:4d:44:42:d4:1c:85:
44:a6:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:28 2025 by rpki-client