Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: N1/VnoFRVl1uwj/l/IHbpEWj4oZM+yzXZtnouFuJ0Ns=
Subject key identifier: F6:B2:BC:91:4A:2B:EB:0C:D2:D1:22:36:79:56:E8:38:B8:A7:43:54
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019880F952144998F77C2254178609F1ED6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0AAD
Signing time: Wed 06 Aug 2025 20:01:19 +0000
Manifest this update: Wed 06 Aug 2025 20:01:19 +0000
Manifest next update: Thu 07 Aug 2025 20:01:19 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: T1zDEzhJvyLhbLiFWAkgqut4eLU79GNmn1FnchSBeGE=)
2: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (hash: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:52:14:49:98:f7:7c:22:54:17:86:09:f1:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Aug 6 20:01:19 2025 GMT
Not After : Aug 7 20:01:19 2025 GMT
Subject: CN=f6b2bc914a2beb0cd2d122367956e838b8a74354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:47:c4:1e:b2:9f:07:fa:9b:fc:3d:fd:d8:
13:5a:68:6c:2f:4a:f2:39:c6:f1:d9:eb:21:c1:83:
e5:8f:13:e8:bf:f5:20:b9:4f:5e:27:de:ab:a7:28:
a5:00:78:a4:e0:4e:db:03:6e:c1:72:fd:3f:6a:63:
a5:ca:f3:01:3f:a3:ff:02:45:d3:23:5e:40:9f:9f:
ce:51:07:ab:d9:fc:3c:ca:42:45:74:ae:da:96:ce:
23:9c:6f:4c:0f:2f:59:bc:84:1b:16:26:2c:4a:cc:
ec:70:fe:f5:90:cb:91:b6:11:45:02:14:8b:52:ba:
03:a0:ca:34:1c:3f:ca:e9:74:74:e7:04:84:41:99:
c0:3c:36:b7:19:b0:80:0f:38:9a:65:e5:93:90:f8:
60:44:b4:70:39:83:ee:1c:77:7c:59:61:18:11:32:
a1:93:6a:65:90:43:34:97:d6:c4:d9:fa:ef:08:77:
5a:3e:e6:9b:34:9c:4f:97:c9:17:d3:54:74:0d:54:
2c:fc:5c:30:09:1d:65:b5:b1:ac:a6:88:82:b5:eb:
78:e2:bc:50:db:a3:da:a4:4d:44:09:8b:9f:5c:55:
d6:1e:05:fc:0d:67:12:05:df:02:6c:ba:ee:6b:a0:
39:cd:1f:d7:a5:87:29:80:31:e7:6a:24:38:ef:6e:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B2:BC:91:4A:2B:EB:0C:D2:D1:22:36:79:56:E8:38:B8:A7:43:54
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:da:a9:da:20:6b:9a:4c:7b:16:68:bc:08:f3:1f:29:af:30:
75:59:4b:fc:6d:b1:4a:41:da:2d:da:7a:bb:39:64:a0:88:f5:
f8:6a:ef:b4:b7:98:b2:51:dd:09:7a:f4:28:45:11:ec:d8:1a:
c1:d7:8b:7e:92:93:8b:d9:48:51:76:bc:8f:7b:a2:27:dd:11:
5f:e6:f7:b3:fa:62:96:10:2b:2e:31:d2:62:e8:79:97:61:e0:
13:90:39:85:be:83:dd:79:d4:79:fd:0d:29:5b:b9:61:9f:c6:
82:71:28:7c:2d:d8:a6:eb:f0:ff:8f:92:07:70:66:66:c5:f8:
ba:2a:3e:50:fa:75:9a:d9:e4:cf:01:30:b7:4c:ac:aa:3d:64:
d1:ce:9d:54:87:3d:f8:19:8e:2c:40:27:28:c1:da:e6:26:f4:
8e:7a:7a:c8:4b:a3:a8:a7:4d:24:d2:50:c6:c2:ba:9f:3e:7f:
7a:10:93:c0:df:9f:29:94:7d:98:13:9b:f3:8e:74:83:0c:73:
33:1d:9f:08:22:4c:c5:0c:71:be:40:f5:11:25:fc:a3:ef:69:
45:25:ca:5a:46:51:37:c5:e0:ce:db:7d:cd:ed:c9:43:73:7f:
51:b5:a1:3e:e7:15:ee:88:68:94:9d:f5:ec:b9:27:ce:80:63:
17:59:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:24 2025 by rpki-client