Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: nUZKZkxmVZw1p268q+CswH2cJiqD+Tb26yDVzxLx0g8=
Subject key identifier: A0:FB:EA:39:C7:57:6A:36:D1:16:28:1A:1D:50:73:44:DD:4D:DE:45
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 0198394DA135AB0B81724B61D13D84BB0F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 15F8
Signing time: Wed 23 Jul 2025 22:00:45 +0000
Manifest this update: Wed 23 Jul 2025 22:00:45 +0000
Manifest next update: Thu 24 Jul 2025 22:00:45 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: jquhR3Lubkzb9UZpBIWsYmFi2X3LD7KbKbjm3REJKnQ=)
2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:a1:35:ab:0b:81:72:4b:61:d1:3d:84:bb:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Jul 23 22:00:45 2025 GMT
Not After : Jul 24 22:00:45 2025 GMT
Subject: CN=a0fbea39c7576a36d116281a1d507344dd4dde45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:c7:bc:9e:c3:98:25:f6:9d:7d:3b:c3:e0:
91:15:66:60:86:c0:d2:a7:0f:c9:31:63:43:f4:60:
98:06:e1:9b:35:73:0f:e2:50:6c:34:70:89:11:37:
2f:19:ea:5c:71:56:c9:79:c6:77:26:95:6a:44:a8:
61:0b:a2:18:4c:48:4b:b6:ed:d7:01:7f:1f:11:c3:
26:80:2b:60:97:88:87:62:ad:cb:e5:92:b7:35:35:
ca:b5:1f:c0:ad:d2:ff:39:3a:c0:9f:a0:0a:45:70:
2a:7e:ab:99:c8:bb:26:13:8a:5c:98:3e:a5:3d:7f:
ac:8c:44:0f:fa:49:99:44:59:48:f3:71:ca:ba:02:
e1:5a:a8:35:84:d6:2c:81:30:4e:57:f9:43:ee:76:
85:74:26:9d:79:23:ae:ba:3a:cd:a0:18:b1:0a:13:
4e:36:d3:48:f3:72:e2:01:db:8f:84:65:71:12:51:
e4:72:a5:5d:af:d3:68:7e:d1:b9:23:9b:29:4c:e8:
54:d2:c0:a1:e9:97:88:08:32:c9:02:2c:76:73:44:
d1:b9:1b:b0:c7:48:fe:ca:3e:08:74:7a:05:1a:04:
47:e1:5e:ba:e9:a4:7e:53:07:8d:3b:e6:5d:84:df:
a5:76:49:6c:56:45:42:24:fd:d7:3e:b0:25:74:c6:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FB:EA:39:C7:57:6A:36:D1:16:28:1A:1D:50:73:44:DD:4D:DE:45
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:df:11:9a:ed:3e:19:7f:77:c3:95:b6:ad:dc:09:4f:25:3e:
48:99:c5:1b:a1:03:82:c6:96:ac:ab:7b:70:6d:ad:0b:65:64:
35:ac:9e:be:55:b3:9b:cc:e5:22:ff:0d:37:cd:b7:8d:aa:60:
f4:6b:18:f3:be:80:15:94:90:f7:df:05:51:04:48:59:20:4e:
00:57:d9:7b:4e:be:cc:6c:5d:86:48:14:92:16:e4:da:99:1d:
62:d7:42:c6:95:30:65:5a:bb:dd:5b:5b:bc:36:c0:91:76:c5:
6b:14:85:fd:d2:7e:a7:72:a9:00:a5:b4:ed:5b:df:34:e6:10:
e6:f0:42:8c:68:57:e4:bf:77:da:97:6d:0e:0b:4c:36:c6:d2:
53:59:a1:bd:3b:52:1e:08:92:34:7d:66:0d:0f:a6:52:ab:bf:
0a:37:52:5e:1b:fe:2b:52:49:d3:74:9a:46:13:6f:f6:54:cf:
03:23:60:a0:25:25:30:ea:96:07:f4:3f:5f:d0:58:7c:eb:68:
18:30:49:c1:f0:15:ee:d1:a0:a6:02:a1:d0:60:0f:d6:ce:90:
ba:0d:ef:98:c5:be:b3:ce:5e:0d:f7:3e:b7:44:1a:1e:7d:4d:
53:74:37:c3:4d:ee:92:2f:eb:6c:e3:a5:8a:55:bd:9a:63:b8:
2b:be:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:28:06 2025 by rpki-client