
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: atNHyfmw0/6H8A3gqD07JCm6iEG2KKfiDbPJfYn9NTM=
Subject key identifier: 51:8D:61:F0:42:AC:38:9B:93:CB:7B:79:06:8B:60:4F:42:2D:AA:73
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 01989DB9BE56AD061BC33087B48AC335DD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 126F
Signing time: Tue 12 Aug 2025 10:00:52 +0000
Manifest this update: Tue 12 Aug 2025 10:00:52 +0000
Manifest next update: Wed 13 Aug 2025 10:00:52 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: mdMWqPvqt391JJSECFkcgy37kX7tNCS9CkcNWvHEv2o=)
2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:be:56:ad:06:1b:c3:30:87:b4:8a:c3:35:dd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Aug 12 10:00:52 2025 GMT
Not After : Aug 13 10:00:52 2025 GMT
Subject: CN=518d61f042ac389b93cb7b79068b604f422daa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:4d:5f:8c:50:c5:0a:00:08:9d:13:5e:a4:
70:58:3e:70:d9:e3:9e:c7:87:7b:2b:7d:a2:be:8c:
9b:f2:01:cc:39:58:58:0c:de:dd:7a:5b:bf:77:ec:
85:ec:05:b4:4d:f5:b5:bc:45:6c:bc:b5:9a:45:f1:
e2:50:81:80:ee:e1:8c:2c:fe:0c:d4:ed:2c:3e:a6:
48:8d:ce:0c:b7:f6:79:80:65:fc:38:c2:53:f2:b5:
1a:97:74:f7:b3:5f:d2:a7:3f:c8:db:21:8b:36:57:
18:38:cf:92:8b:52:c5:73:b5:11:bd:8d:2b:e4:42:
97:2d:dc:d0:28:9d:61:e0:4e:f3:97:10:34:44:2f:
c4:d6:ff:30:9c:65:4d:2d:8e:88:91:18:5b:3f:4f:
3c:b1:47:0f:97:e0:87:c3:a0:06:72:90:99:fd:94:
af:f9:92:cf:ed:d8:51:4b:36:55:f7:44:56:3d:9b:
4c:7f:2d:18:c3:6c:87:79:6e:5b:e5:c0:04:09:e4:
1c:74:b3:3d:e3:5f:b1:e4:6a:fc:72:04:e6:98:e3:
28:fc:21:02:12:aa:03:d6:5b:62:00:ab:02:ce:c6:
46:cf:3c:16:ac:bc:db:98:41:b7:8c:1c:79:db:fd:
48:f5:91:3d:64:4b:f5:96:fc:c2:92:a1:45:9c:c4:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8D:61:F0:42:AC:38:9B:93:CB:7B:79:06:8B:60:4F:42:2D:AA:73
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:26:fd:39:97:9f:ea:de:e1:af:eb:e5:7e:1c:79:49:70:57:
6f:3c:cb:3f:00:3d:57:4a:ce:f7:4e:ac:df:f2:4f:b9:f6:7e:
6e:79:31:9a:17:ef:1d:86:c6:88:53:25:71:0e:e8:ae:7a:97:
33:de:22:4c:d4:c4:33:45:0f:5a:4e:a5:0f:aa:76:83:ae:e8:
51:39:68:50:26:a7:46:4d:e7:8a:a7:3a:d3:19:0a:27:33:2b:
e0:d7:52:de:bd:41:d3:f5:1e:ab:5a:85:d4:68:f4:9d:92:37:
ad:1f:bc:23:31:6f:70:65:78:b8:3e:5b:4d:8b:eb:2b:80:59:
c1:96:34:96:d6:c9:e7:dd:16:c4:bd:83:65:b2:52:2a:91:f5:
13:01:1c:c3:4a:61:d9:bb:52:32:08:a4:5d:d2:88:f3:6c:ac:
c2:7e:78:7e:bb:3d:4a:61:bf:22:c1:df:1b:fc:f9:a0:6a:c0:
3e:da:7d:70:99:3e:f9:e7:c6:3f:d3:1d:2e:f5:8d:8a:3f:80:
7f:e0:90:e2:1f:e4:67:fa:0e:8f:fa:88:43:a5:be:7a:8d:f7:
a0:11:78:07:a3:52:6e:17:f7:93:2c:ae:f7:d8:24:40:9d:96:
7e:6b:8a:a4:ad:f4:55:21:57:c5:08:8f:cb:95:2b:e2:5e:9e:
d2:5b:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:09:35 2025 by rpki-client