Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: XpY2hRw598SivGZsMBj0o3Tpwm59ToYnrhfPII2j06E=
Subject key identifier: FE:65:BB:D4:23:1E:B3:AF:58:7B:CC:F1:B4:B5:43:CD:B6:EE:D7:F1
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 0198737437E7B172E745C155A990001B512A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0D79
Signing time: Mon 04 Aug 2025 05:00:52 +0000
Manifest this update: Mon 04 Aug 2025 05:00:52 +0000
Manifest next update: Tue 05 Aug 2025 05:00:52 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: yh0nlSS5XNf8w4STJk1F8It1U0VuvJVhOiSrHkSomXw=)
2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:37:e7:b1:72:e7:45:c1:55:a9:90:00:1b:51:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Aug 4 05:00:52 2025 GMT
Not After : Aug 5 05:00:52 2025 GMT
Subject: CN=fe65bbd4231eb3af587bccf1b4b543cdb6eed7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:fe:57:cc:df:57:74:7f:c0:29:eb:0a:ce:
5b:c1:6e:d8:8e:99:e1:cc:4e:16:6a:5b:b3:01:3a:
9a:4f:30:f0:68:da:11:20:11:86:ef:20:8c:f3:e0:
92:2b:91:c0:39:09:37:7c:54:ff:3f:17:0b:1c:d7:
0b:79:0e:72:ae:6f:b7:49:05:5e:03:52:09:21:53:
fd:d1:18:e9:85:97:3d:0d:26:42:95:91:d6:37:ed:
fa:eb:e6:73:1f:c9:78:eb:a1:30:a6:d1:7b:54:4f:
de:a1:2e:e4:e5:64:7d:cd:b0:25:ec:3c:82:0a:eb:
3c:bb:29:f4:23:b5:92:9d:b0:94:30:98:fb:e0:03:
04:f9:08:b0:6d:f7:59:b0:ca:0c:6d:2a:e6:4c:b1:
46:41:7a:3a:0a:e9:ce:f4:48:ba:66:af:18:56:c2:
52:b4:17:35:11:c2:6a:44:43:0c:b2:a9:d2:1a:23:
73:5b:b9:99:cc:a6:b2:63:c5:34:3f:db:a5:03:fe:
cb:64:1d:58:53:e1:d4:e8:85:36:48:ae:79:e6:82:
9d:74:d3:86:e3:e0:e9:da:d0:08:3a:b0:96:1b:56:
d4:d7:62:c4:e7:3d:b1:f1:1d:51:e7:e5:ee:48:e9:
08:fe:fc:9c:d8:17:93:3e:fa:9a:17:56:ad:95:ba:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:65:BB:D4:23:1E:B3:AF:58:7B:CC:F1:B4:B5:43:CD:B6:EE:D7:F1
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:3a:c5:34:75:3b:91:4c:4f:a2:2f:3e:73:54:32:cb:94:
9e:de:76:fd:fc:b2:8a:4c:3c:4a:90:5e:a1:d6:65:12:fd:3d:
97:40:9f:a2:b3:4a:3a:07:9c:50:a7:0e:bf:96:76:d0:9b:34:
ea:0e:da:0a:d5:fd:91:77:ba:27:42:37:2b:c3:77:dc:d1:4b:
30:02:01:80:e4:d5:75:dd:52:3f:50:81:36:b8:e6:86:45:2d:
6f:09:19:e5:c2:4d:6a:56:c1:f0:f5:33:d8:72:18:c3:96:ce:
e1:38:86:09:2b:b7:a7:5a:a2:c0:1c:be:2c:ed:5e:8b:f4:14:
eb:1d:61:01:32:50:d0:b8:8e:d6:4c:0b:e9:6c:df:76:8f:cc:
02:51:a0:ef:18:84:15:dc:bf:5e:14:db:1a:82:de:de:e9:ea:
e7:37:0c:b7:ae:f2:f6:8f:40:41:1d:96:96:fd:cb:c2:e9:ba:
3a:0d:4e:e7:6f:34:cc:48:36:76:b1:c8:47:3a:ee:a9:fe:84:
64:0f:fa:2a:c3:33:aa:aa:f5:4e:98:6d:40:24:9a:cf:02:eb:
c1:95:e4:16:d8:92:32:1a:a2:70:f8:9d:56:62:9b:4b:ed:d9:
ac:c5:30:02:4b:d2:69:3f:28:93:55:75:3c:aa:c9:a1:94:72:
48:25:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:26 2025 by rpki-client