Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier: tF8lgoesto0LtmUzLj/meV/ALsPf1pCybo/ssGPaYi4=
Subject key identifier: CF:C3:FA:E5:BD:39:17:C7:C1:1C:8D:C6:0F:67:C1:C4:DA:EF:C6:22
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 01984A09F1BE485D5EAB3DBD0D6014D312D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number: 14B8
Signing time: Sun 27 Jul 2025 04:00:22 +0000
Manifest this update: Sun 27 Jul 2025 04:00:22 +0000
Manifest next update: Mon 28 Jul 2025 04:00:22 +0000
Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: Yr+qGfnnVLyroUIf1GbvpEYqsdqO4d+XZk7Qw5mwmwo=)
2: Wh1jH5vANwZcwldoZxeJx9Ms8Tw.roa (hash: /m2D3y0N+aO5CYT+TsC7FYKiJpOsP+DSU+ozinhXmV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f1:be:48:5d:5e:ab:3d:bd:0d:60:14:d3:12:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Jul 27 04:00:22 2025 GMT
Not After : Jul 28 04:00:22 2025 GMT
Subject: CN=cfc3fae5bd3917c7c11c8dc60f67c1c4daefc622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:68:1a:62:17:ed:a4:15:21:7b:2b:41:52:
00:76:34:58:c5:2a:0b:a3:20:2d:9c:25:13:f6:97:
dd:a8:a4:53:af:dd:50:35:b8:e8:62:9f:42:15:b3:
1e:fc:db:f3:26:30:d7:75:73:2a:13:37:69:7b:2e:
a6:1e:ab:fd:7b:07:b9:ab:e4:e3:5f:4b:33:5e:d7:
28:06:d6:e9:89:7f:fe:dd:a3:ea:78:4c:55:6a:05:
37:36:a9:a0:94:f8:87:78:20:24:5c:33:05:eb:cd:
a2:92:b6:c0:fe:2b:28:80:bd:f3:3b:df:03:13:26:
19:00:52:54:9a:f6:d8:45:1c:e4:b9:b5:8a:c2:4f:
04:b4:51:9b:80:35:0b:18:96:d2:0b:22:54:34:92:
51:db:b2:32:19:bb:29:e3:ab:95:dc:61:fb:43:15:
7c:c2:61:b6:bb:31:e3:ca:c6:ce:04:8b:6b:36:c1:
20:b7:84:19:3b:f4:cb:98:9a:4c:5d:7f:53:1f:6f:
16:8f:d2:57:be:e7:b4:51:1f:ea:b1:5f:19:bf:59:
18:a3:4d:d5:dd:5c:42:fd:7d:b1:5a:92:54:83:1d:
16:cf:43:b6:06:60:d6:b7:59:77:c3:50:33:7e:eb:
eb:70:87:d9:01:70:83:7a:ae:0d:66:40:99:45:9f:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:FA:E5:BD:39:17:C7:C1:1C:8D:C6:0F:67:C1:C4:DA:EF:C6:22
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e8:bf:75:47:9b:a8:f6:5d:46:03:5c:13:bb:a5:f8:62:63:
9f:0e:44:91:94:26:72:15:e8:98:24:6e:e8:7d:55:3d:f1:ae:
58:67:42:3b:73:26:a4:80:48:ec:04:b1:d5:e3:1f:35:23:1f:
df:ac:82:d0:f8:1a:6b:1c:a2:f3:6c:59:7f:be:5f:e3:30:c6:
dd:51:cc:5f:63:73:9d:c7:66:ea:db:86:8e:4a:34:ba:3c:dc:
ea:75:bc:e0:2f:4f:61:a8:7e:91:94:47:d2:ac:9b:bf:cb:d2:
a0:0c:d0:af:e6:bd:20:03:38:6a:ea:8a:c3:af:3d:71:0f:c3:
f5:19:05:fc:14:fa:3f:2b:84:d6:13:b7:3e:70:18:e4:9e:20:
33:53:f4:55:dd:c7:f7:4c:39:5f:77:34:e5:4b:e7:a5:cb:59:
24:23:b9:39:52:e0:86:f0:e6:dc:98:f9:2b:05:dc:39:d7:9e:
5e:d1:bd:27:2e:bc:d1:05:2c:93:9c:83:9f:4e:d6:9f:7c:e3:
57:ef:66:0f:12:cd:ef:de:06:c4:66:47:8b:c3:7c:45:bd:64:
27:6b:62:ef:b3:73:82:7b:17:a6:40:6e:16:b7:86:f9:ec:58:
30:2c:71:73:bd:e8:c7:9d:88:00:00:e8:fe:4d:17:dd:51:03:
83:19:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:54:59 2025 by rpki-client