Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: F659Hj5G7O8nPvrP2Hmf3ggpEf8TFsh/nywUpYQBZtw=
Subject key identifier: 3B:3E:CC:39:8B:6C:84:15:F1:D4:B6:02:AA:06:49:D9:73:22:6C:C6
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 019895C9339B51BC0C914168740AE90A4BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 03A8
Signing time: Sun 10 Aug 2025 21:00:47 +0000
Manifest this update: Sun 10 Aug 2025 21:00:47 +0000
Manifest next update: Mon 11 Aug 2025 21:00:47 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: zPot4GgRpEPI5eDWcHst5riMPtBVrZ29AkJKYZWWkcc=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:33:9b:51:bc:0c:91:41:68:74:0a:e9:0a:4b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Aug 10 21:00:47 2025 GMT
Not After : Aug 11 21:00:47 2025 GMT
Subject: CN=3b3ecc398b6c8415f1d4b602aa0649d973226cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:45:59:74:5d:db:f2:89:f0:5a:f5:ac:51:
11:22:d3:80:aa:67:71:66:22:aa:f5:1c:3e:b2:f1:
87:53:2e:19:7c:f1:ba:f4:b6:4b:69:80:95:d2:58:
5d:b8:42:e0:fb:13:e9:f9:d1:0d:b6:8e:31:b2:77:
4e:90:02:7f:d5:36:bd:a1:c7:21:b2:3d:3f:57:af:
b5:ca:d3:ba:b1:0d:f2:b9:15:af:c7:36:85:65:c2:
ff:a4:18:7a:9a:15:c6:ed:15:fb:4b:40:12:10:fa:
ba:ec:e9:60:ae:40:15:a9:80:7b:86:91:03:29:53:
a2:ba:3b:df:70:16:2c:cf:a7:ba:74:0d:8f:c1:12:
f8:10:7a:1f:ae:a8:43:fd:b3:c7:5b:bb:7c:28:e9:
85:62:62:b0:82:5e:ad:70:03:f6:f7:6c:0b:bc:14:
cf:d5:53:19:fd:02:58:4c:da:52:2c:7f:31:45:1b:
21:e6:b5:c0:5c:78:f0:f1:be:71:05:d7:42:0b:16:
25:d2:70:ed:c7:4f:94:38:66:16:cf:cc:91:98:4d:
7a:1f:2b:46:ca:c5:30:6f:4d:b3:2b:10:85:1b:09:
cc:0d:10:b3:9a:15:d8:e9:88:43:1e:83:dd:40:23:
64:3d:e1:bb:1e:0f:49:b5:d1:53:e8:10:4a:5a:15:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:CC:39:8B:6C:84:15:F1:D4:B6:02:AA:06:49:D9:73:22:6C:C6
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3a:a9:27:2e:30:31:f0:37:49:4d:04:79:50:41:2a:2f:1e:
c6:bf:90:cf:4d:31:19:63:af:eb:d3:52:b5:a0:a7:66:6f:98:
da:90:52:2b:3e:34:d8:b2:6c:ac:b2:8f:04:4e:4b:e3:e6:88:
58:1d:82:42:96:9a:88:9e:bc:db:dc:d4:76:64:73:c6:75:a6:
0e:48:26:95:51:95:9c:ca:c9:95:d4:61:67:6b:11:fa:0e:e7:
4a:46:69:38:d7:1f:58:9b:4b:f8:0e:f8:da:1d:53:3d:61:90:
46:1d:e3:9b:92:38:65:bb:68:a4:9c:3b:30:0c:0b:ed:d4:a6:
d2:5d:b3:f7:28:f5:25:18:5b:92:08:f2:12:31:89:16:d5:25:
fc:1d:3d:a3:30:a1:57:06:54:55:b3:97:5f:85:7d:b6:da:ca:
e0:27:7a:58:d6:72:2f:d2:34:a0:10:b5:6b:c9:29:7e:c0:ec:
b9:dd:c8:ca:ca:1e:de:69:03:d6:7b:92:e9:5b:81:7d:9b:37:
72:46:7c:3c:91:47:2f:8f:36:e8:20:d1:ff:be:85:08:4e:1a:
2d:ef:05:4b:5b:bf:ee:26:fe:d5:59:7c:a2:45:01:26:31:91:
4d:ab:35:8c:44:3b:84:71:f6:6b:95:bb:1e:96:98:67:91:1f:
61:bc:c0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:59 2025 by rpki-client