Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: iJlm2nMpYH45EI3W/4SMb5V9syigI4VOu7h93H6/okQ=
Subject key identifier: 52:D5:7A:B3:CA:A3:AF:CC:22:FF:41:E9:5F:33:4E:82:AE:84:01:38
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 019849653DA53AA5BE09A8A2671EFA096747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0CE8
Signing time: Sun 27 Jul 2025 01:00:28 +0000
Manifest this update: Sun 27 Jul 2025 01:00:28 +0000
Manifest next update: Mon 28 Jul 2025 01:00:28 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: vZ3dZYj53zRqiRktLTAPhONHjCkhv3dJz8G7yL72yak=)
2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:3d:a5:3a:a5:be:09:a8:a2:67:1e:fa:09:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Jul 27 01:00:28 2025 GMT
Not After : Jul 28 01:00:28 2025 GMT
Subject: CN=52d57ab3caa3afcc22ff41e95f334e82ae840138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:f8:99:c6:0a:bd:68:b2:bd:83:96:bf:5f:
2d:cb:de:45:22:0c:ee:15:dc:38:18:d8:69:b5:ef:
1b:48:4d:13:e6:86:bd:a7:ff:22:74:81:a2:be:91:
45:f3:56:eb:72:19:03:ec:19:08:bc:a6:23:28:11:
0a:35:94:94:08:66:dd:5d:b3:b1:e7:93:40:fd:48:
88:fb:34:15:e6:a6:69:e5:27:32:c8:ba:a7:7d:7a:
d3:3c:2c:07:6d:61:57:f2:93:de:8a:eb:b2:6b:88:
34:b0:77:ac:7d:78:75:8c:ee:81:73:fa:48:de:eb:
bc:49:8f:4e:bd:66:42:32:9e:f7:aa:51:e5:5f:77:
3a:9a:fe:34:df:9c:7d:6b:a5:4c:e6:e6:ca:71:9b:
a6:22:a6:b3:e0:2a:9d:b9:03:af:2a:73:dc:45:04:
da:21:b4:8d:bf:4b:5d:8a:b1:68:66:0b:f3:00:80:
5d:87:f6:06:4c:0f:89:b9:61:aa:ba:d9:59:aa:d4:
47:f4:65:a1:be:6c:8e:b9:5d:7a:ac:aa:24:0f:cb:
74:09:e9:87:ff:46:54:f4:85:05:39:f6:1f:df:a0:
cc:4a:f9:ed:b9:8b:12:ba:35:ec:af:05:89:7e:d6:
2e:85:30:fe:ca:1d:81:05:89:75:13:8c:29:b8:1f:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D5:7A:B3:CA:A3:AF:CC:22:FF:41:E9:5F:33:4E:82:AE:84:01:38
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bf:02:f6:1a:75:a8:b2:c8:dc:c6:db:e4:2c:52:9e:92:4f:
57:ff:6d:81:a6:36:f5:b5:d0:b0:00:73:b0:f3:e6:f4:c8:d7:
c0:5d:df:23:e6:ea:de:81:08:41:ca:e8:e7:2c:57:ee:b6:bb:
18:d7:85:37:b0:c6:cb:9d:54:35:d1:71:6f:64:0e:90:27:6f:
0b:1d:af:1c:a7:32:de:2a:38:bf:3d:c1:1a:ad:22:5e:f2:09:
39:ef:b5:49:ff:68:62:0b:29:8f:3d:a3:cb:fe:bf:9b:7e:21:
4e:ff:5b:54:4d:bb:65:4c:18:dc:dc:55:2e:3c:13:5d:72:66:
98:20:b3:4d:11:7e:39:6a:b6:d0:1a:6a:21:62:08:c9:97:1d:
c1:93:ad:fe:2f:c6:e6:a4:91:83:63:93:91:28:a1:30:c5:1e:
fa:41:3a:56:e5:7f:8b:9f:66:09:b7:39:c2:43:50:ad:c1:40:
c6:42:85:e2:5b:80:66:ff:bd:25:10:05:ce:34:dd:ef:66:1e:
8d:e0:3e:e9:39:8c:d3:1b:27:32:38:74:9c:82:5b:c6:32:ea:
d7:13:00:7c:e0:75:19:dc:ee:49:69:e1:0e:e4:6f:23:0c:46:
91:32:3c:fe:5e:f3:d1:81:58:3c:1f:ff:4a:01:48:c3:79:bc:
ca:21:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:26 2025 by rpki-client