Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: KjLiwt+nn9hwFGayVeBRuUp/ydV2EvDhpzUFaQwOpVg=
Subject key identifier: 63:88:06:73:BD:23:27:75:55:11:F9:50:3B:F3:6E:46:A9:28:D1:8B
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019896A5BBF05E261D6985BB1B9FA896E96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 0E50
Signing time: Mon 11 Aug 2025 01:01:40 +0000
Manifest this update: Mon 11 Aug 2025 01:01:40 +0000
Manifest next update: Tue 12 Aug 2025 01:01:40 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: UoRbeclGZl7ymvz3tOi3wkpehwthBQ7/mVYxTw78aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:bb:f0:5e:26:1d:69:85:bb:1b:9f:a8:96:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Aug 11 01:01:40 2025 GMT
Not After : Aug 12 01:01:40 2025 GMT
Subject: CN=63880673bd2327755511f9503bf36e46a928d18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:e9:f1:75:6b:6a:8a:2c:c9:65:b9:13:21:
6e:f3:a0:bb:1a:4d:45:c7:f6:f8:c9:db:4f:20:88:
0c:df:76:c3:58:d7:89:53:b3:e7:65:1d:c4:77:bd:
8e:37:4f:a0:3f:bb:93:53:31:fa:f9:ac:5e:e2:74:
26:8a:42:52:cb:52:4e:4b:14:5d:e9:64:48:78:2b:
fb:f3:68:3f:2c:f2:56:12:23:8d:67:f3:87:8d:27:
f8:0c:1e:51:ef:84:bb:00:68:94:51:83:d1:5a:44:
c4:ee:85:51:ea:d9:61:22:d7:10:7a:67:ff:a9:19:
e4:94:74:7d:6e:d0:93:a6:2d:e5:0d:c4:cd:72:c9:
84:67:3d:03:1c:ee:e8:2e:2e:b7:6e:b5:eb:f9:64:
69:ea:a4:d7:50:bd:22:9f:4e:01:18:a5:ae:bf:78:
0a:00:c5:d3:e8:18:76:bf:4d:a1:12:33:f1:a9:88:
a8:14:f2:14:92:b9:19:62:b6:78:8c:fe:bf:b7:07:
a5:0f:3c:58:81:5e:7f:29:d7:9a:12:4e:ca:eb:fb:
ab:d4:eb:3e:a6:ae:35:1d:00:6b:df:29:e8:60:c9:
8d:6b:45:4e:c9:46:3a:f3:5d:64:f7:74:18:4e:3b:
ff:03:15:00:1e:c7:b9:8f:af:c6:c3:e5:d0:18:fb:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:06:73:BD:23:27:75:55:11:F9:50:3B:F3:6E:46:A9:28:D1:8B
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:f7:2f:34:e9:1e:ff:a6:97:35:71:73:1c:e1:e4:42:3e:
39:cd:35:01:da:83:79:2b:7c:c5:51:bb:12:46:4a:c1:3d:78:
e3:3a:4a:4a:d4:e6:47:43:53:d3:25:b2:16:79:c5:b1:d8:f1:
4b:25:0f:20:00:74:2f:56:1c:a2:ed:4f:59:02:51:6a:79:74:
70:0b:f9:ea:6e:02:02:db:2b:d9:87:0f:f2:ca:a8:29:27:fb:
b9:3b:79:c0:14:c7:b6:97:39:43:6b:3d:34:48:48:88:da:c4:
ef:cc:68:3d:97:67:30:7f:89:fa:fe:53:c7:f1:52:dd:b3:48:
91:0e:69:1e:47:60:ad:79:4c:27:46:ff:a5:cd:0e:5c:7d:fa:
ca:31:b6:0d:af:5b:44:90:8f:3f:2b:bf:a6:3c:e5:f1:23:23:
8d:1d:b2:de:dd:e1:c5:e8:32:9f:ac:ed:71:a2:d3:40:21:0f:
bd:1c:14:4e:42:f3:40:38:1e:ee:ce:3b:7c:e7:29:29:dd:7a:
9f:a8:94:08:39:e3:57:21:3a:ce:95:c0:52:c9:a5:09:66:cc:
f8:1e:1a:9b:7b:04:be:c9:c3:82:aa:67:59:94:1e:b6:d6:66:
25:82:33:61:3d:71:a6:8e:31:e6:2d:aa:3b:ed:9b:c8:77:59:
b4:df:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:21:55 2025 by rpki-client