Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: Ux9kSFw44YcQin5KwFnjGniDYIlGXUyHiAgrcpRp6ak=
Subject key identifier: CE:24:4E:CB:24:25:3D:49:10:6C:95:5B:99:62:0D:E4:0C:C4:AF:77
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 01984AAEA4B4435E2F96BFBAED4FFB86203A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 0C5C
Signing time: Sun 27 Jul 2025 07:00:16 +0000
Manifest this update: Sun 27 Jul 2025 07:00:16 +0000
Manifest next update: Mon 28 Jul 2025 07:00:16 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: 5dZtBqb4YywAuMQeSyOAHHXkdjQs8dx0QhrUWTiOCl0=)
2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a4:b4:43:5e:2f:96:bf:ba:ed:4f:fb:86:20:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jul 27 07:00:16 2025 GMT
Not After : Jul 28 07:00:16 2025 GMT
Subject: CN=ce244ecb24253d49106c955b99620de40cc4af77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:8f:80:84:e2:1e:94:58:37:41:5c:ad:a9:
d3:6a:35:97:08:55:e9:6a:40:22:40:43:74:c6:58:
a0:59:dd:00:4a:cc:af:da:a7:c1:56:f1:84:8f:67:
fc:08:c0:81:11:98:04:5c:76:9f:ef:c5:06:8b:45:
23:35:1b:de:61:cd:ed:84:0a:27:d9:74:aa:32:5d:
58:13:42:a8:f8:d7:83:03:fb:cc:7b:c3:a1:ad:1a:
7d:37:7e:57:00:cb:ea:36:c9:76:c2:d6:62:86:cb:
52:fc:78:66:9a:6a:e3:92:35:6e:a6:bd:ba:c1:09:
29:b1:0c:d8:57:81:82:aa:5c:7a:53:41:9c:aa:c3:
33:b2:fd:bd:35:82:36:1e:c3:af:d2:12:ff:b5:07:
02:7d:0f:fc:99:97:c8:ff:37:2c:f4:d9:d8:20:11:
ba:26:90:28:5f:2e:a2:20:13:9a:4a:84:17:22:10:
e7:42:96:56:1e:b8:48:5b:e2:84:d9:80:ad:16:bf:
b4:57:da:32:29:f5:cb:f1:d3:dc:84:86:40:29:16:
7c:a4:ab:4e:7f:32:36:8e:23:ca:d1:c1:e1:85:e1:
99:57:8b:c5:12:19:65:b0:de:c5:36:39:73:86:c1:
61:90:f5:b7:12:2f:65:3d:da:f2:cc:47:4c:70:ab:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:4E:CB:24:25:3D:49:10:6C:95:5B:99:62:0D:E4:0C:C4:AF:77
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:50:4c:d7:3f:59:aa:c1:d9:7f:bc:76:e1:93:8e:fc:1c:
9d:43:b2:02:93:70:64:df:48:e7:e6:4a:46:3a:3e:43:4e:18:
76:e5:8d:5f:eb:10:c7:51:c7:88:6c:9a:64:e7:3c:ab:7a:3c:
5f:9d:76:96:a0:de:84:7c:2a:3c:41:17:b6:57:e2:73:92:b1:
ba:21:6d:63:6e:9f:0e:29:6e:73:21:95:e4:12:90:e5:7f:70:
ea:5e:60:e7:b1:ae:ef:9a:88:6a:c3:68:8a:b8:dc:05:93:e0:
1e:02:3d:8b:95:c0:9c:47:dc:01:d6:b5:b5:35:7a:24:81:c9:
43:95:14:e8:e4:04:6c:c3:ad:ca:4a:22:b2:20:4f:89:d7:f4:
df:d5:83:1e:99:0c:02:11:7a:dd:be:cc:69:05:a9:13:34:4e:
06:b9:7a:06:7d:6a:25:a0:c4:0f:b1:fe:74:c0:a2:05:8a:52:
79:31:08:2a:0b:6f:e1:55:7f:ba:d0:99:72:2c:bd:4a:38:68:
48:c6:f3:68:be:86:a0:34:38:51:6e:8b:4a:50:6a:69:ac:49:
3f:06:c1:8c:67:97:10:67:ef:c6:80:df:c1:f4:8b:34:e1:dd:
db:3d:ac:21:57:e6:58:a6:a2:f7:d1:ec:bf:80:2e:ff:d3:4d:
49:a0:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:54:13 2025 by rpki-client