Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
File: 3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft (raw, json)
Hash identifier: 3FotXOkO20qgxR14TFvcfOnm1f+lYLtXopQme64Ju68=
Subject key identifier: 49:E1:4C:C2:F7:AF:EC:32:EC:B1:3E:AD:6F:95:16:37:E1:B5:2A:FE
Authority key identifier: DE:8E:07:83:94:B3:40:C1:CE:E4:79:F9:E6:13:A1:EB:D2:B3:68:6D
Certificate issuer: /CN=de8e078394b340c1cee479f9e613a1ebd2b3686d
Certificate serial: 01982BC9355888E94EFF1087FD4B837FF39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
Manifest number: 46
Signing time: Mon 21 Jul 2025 07:01:03 +0000
Manifest this update: Mon 21 Jul 2025 07:01:03 +0000
Manifest next update: Tue 22 Jul 2025 07:01:03 +0000
Files and hashes: 1: 3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl (hash: hTy6rC4XkG8YDTX+qhPKBCTVVBx85QtnDWBrs55v/1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:c9:35:58:88:e9:4e:ff:10:87:fd:4b:83:7f:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e078394b340c1cee479f9e613a1ebd2b3686d
Validity
Not Before: Jul 21 07:01:03 2025 GMT
Not After : Jul 22 07:01:03 2025 GMT
Subject: CN=49e14cc2f7afec32ecb13ead6f951637e1b52afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:ba:97:90:3f:ca:1a:cf:55:e1:4a:c9:18:
20:29:bb:32:97:62:be:15:39:5e:ea:4d:04:18:d6:
ac:bf:f0:98:1b:8c:0d:00:0d:b6:6a:8f:ea:a9:69:
5a:8d:0e:54:f9:c3:61:45:28:33:08:09:19:d9:18:
9e:45:8a:7a:d8:db:19:b1:2e:c8:26:a8:98:34:45:
0c:77:d2:dd:fa:d8:13:2b:9d:c4:87:10:06:7c:7c:
4b:3f:45:92:0a:0c:4d:96:77:83:6c:ad:75:b6:df:
74:f8:53:18:04:fd:b5:33:c9:a6:e8:b9:2a:80:86:
1c:e5:59:66:55:75:0b:fb:86:00:57:29:c8:11:e9:
64:82:f1:55:44:14:80:30:2c:61:37:83:e5:7e:82:
e8:9d:c4:af:b8:6e:ac:41:06:b1:9d:8c:09:ac:01:
e2:a9:89:49:62:ad:87:5e:c2:85:fd:69:13:43:9f:
88:95:b6:c3:05:59:f3:73:43:9b:cb:95:f3:18:65:
c5:b2:0d:70:44:0f:2b:21:f3:3c:d0:70:56:3b:69:
9c:ea:7d:0b:31:ea:6a:cc:95:03:42:78:c1:d8:e3:
93:8f:45:42:fb:9e:6e:63:a4:f8:a2:60:fd:f6:ee:
0a:dc:3a:a2:b6:79:2b:c5:84:f4:99:95:fa:32:89:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:4C:C2:F7:AF:EC:32:EC:B1:3E:AD:6F:95:16:37:E1:B5:2A:FE
X509v3 Authority Key Identifier:
keyid:DE:8E:07:83:94:B3:40:C1:CE:E4:79:F9:E6:13:A1:EB:D2:B3:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ef:18:39:7a:74:08:e0:59:22:74:8f:39:f5:86:fc:8a:59:
3b:22:7a:15:65:a5:7c:a4:89:01:ea:cf:29:a3:dd:f6:6e:87:
3b:12:83:b5:34:d2:87:c8:35:e7:bc:0d:c7:42:19:14:40:dc:
61:42:ac:6f:c1:f7:00:41:8e:e5:fa:e4:2f:cb:ed:f8:9e:82:
2b:ec:02:97:da:85:9c:84:17:c9:43:f3:11:b2:1c:ae:03:b5:
20:c1:1c:8d:3d:0a:8c:9e:0e:96:84:42:7c:a6:d8:61:b2:37:
94:8c:cb:7e:11:78:3d:11:62:a6:2c:50:2d:44:63:66:ad:43:
bb:ab:27:db:00:af:90:3b:8e:0b:35:6d:7e:14:f6:0a:0d:be:
af:9f:94:95:ca:03:56:53:8a:4f:db:78:28:37:1b:42:f3:c7:
c3:d2:57:13:1a:61:ab:2e:32:3a:b9:0a:f4:1e:de:2b:fd:5e:
b6:2e:48:60:82:67:79:e9:92:03:db:91:d1:64:32:90:58:9e:
3a:5d:4c:43:a0:b2:c0:45:f0:e3:71:62:7a:cb:48:59:cd:43:
c1:ef:75:20:9c:a8:4c:25:b5:6d:e9:86:08:5a:69:6f:ca:9e:
94:29:9b:62:43:f5:d5:6d:25:9a:69:1d:87:0a:c6:eb:ba:87:
09:91:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:33:02 2025 by rpki-client