Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: 8ghJ+fgOsiwfzuD7KWpVcQ4BVZuU3vlGF7kUEh/z7/o=
Subject key identifier: 02:A3:D8:38:2F:3D:2E:8F:3E:C4:0A:48:7C:D4:B7:D2:61:10:B3:A1
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 019845F70CB1C92796F5DD56D2E3C70B769D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 12F1
Signing time: Sat 26 Jul 2025 09:01:15 +0000
Manifest this update: Sat 26 Jul 2025 09:01:15 +0000
Manifest next update: Sun 27 Jul 2025 09:01:15 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: GlaYs6vNiLCVFXKKVwU242sm5E3wRzjC4e1kvxneKjE=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f7:0c:b1:c9:27:96:f5:dd:56:d2:e3:c7:0b:76:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Jul 26 09:01:15 2025 GMT
Not After : Jul 27 09:01:15 2025 GMT
Subject: CN=02a3d8382f3d2e8f3ec40a487cd4b7d26110b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:8c:21:45:e4:b0:98:5e:90:dd:78:05:db:
e1:9f:17:11:1e:d7:de:ba:de:85:01:71:69:9d:48:
90:3a:d5:29:88:06:0a:7b:6e:9c:fb:70:e3:bb:81:
fd:3b:4c:e1:e7:7f:f3:31:bd:a2:02:98:be:6a:4c:
a2:0e:3f:77:3b:09:7c:13:19:e0:9d:cc:5c:e4:45:
e4:29:42:de:fa:10:0b:4c:f7:65:e0:8b:c1:0a:7d:
c2:07:52:be:16:0f:5f:b4:dc:92:60:ed:49:20:ae:
82:f5:2f:ca:48:9d:c4:8f:6d:65:27:8f:24:0e:0d:
4f:77:2b:03:b5:b8:f0:85:18:fa:9c:4c:4e:fe:d6:
9a:ba:77:1d:2b:35:f0:95:3d:8f:11:27:bd:99:82:
fe:68:f6:82:d9:b4:47:18:8c:d0:3e:42:b8:0f:8d:
0e:c9:53:cc:c4:4e:35:ed:92:66:fb:4f:04:9a:04:
08:f7:71:0a:c6:f0:65:65:95:4b:f5:07:37:0a:a5:
73:b3:22:21:13:f1:59:df:0c:32:fa:05:07:0d:cc:
a4:db:7e:26:26:31:a9:7d:11:6d:39:50:b7:37:69:
26:b4:4f:3c:dd:ff:fa:8e:39:07:0b:c0:20:05:fe:
c3:b9:8e:5d:f5:a3:fd:bb:ab:d6:4a:4e:70:6f:9c:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:D8:38:2F:3D:2E:8F:3E:C4:0A:48:7C:D4:B7:D2:61:10:B3:A1
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:1b:0e:fb:d1:8e:ab:44:63:0f:a5:21:f4:f1:74:63:6c:
e7:56:f8:e0:6f:dc:b9:40:bc:ca:2b:6b:c0:f7:fd:af:4e:56:
4b:35:ec:b9:33:12:8f:b6:bc:83:cd:05:9b:ff:11:03:a0:e0:
f5:92:12:c9:bb:9f:38:d2:11:18:3d:aa:e5:df:1c:ca:ba:34:
de:fb:0d:61:01:7e:06:b4:b9:61:fb:ba:23:96:fc:3e:d0:07:
6f:5f:f7:6a:c7:85:e2:ea:86:2b:88:1f:f9:1c:3a:3f:fe:48:
1a:c5:3d:0d:0a:7e:5a:30:9f:f7:6b:8a:24:32:62:0a:53:91:
67:d2:f0:b1:fc:a5:3f:af:b3:39:4b:85:d8:6b:5a:0e:69:62:
ce:17:ac:01:6f:1c:16:ca:9a:cb:4b:9e:5a:4c:98:f2:31:f7:
26:87:5f:a1:d4:af:1b:36:fa:ff:e4:7d:c4:37:97:d0:66:d8:
59:f6:66:c4:03:47:5f:ad:3c:01:57:32:cf:26:da:f5:cf:23:
45:5d:37:d1:24:ea:8e:a5:4f:a6:b0:3c:85:64:42:5a:09:4f:
ff:16:96:40:43:04:90:4d:ea:6f:89:6b:1d:5a:fd:8f:d9:a2:
f9:a9:cd:89:a5:b3:03:31:6b:4a:e3:93:27:35:27:fd:2e:ec:
13:fa:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:15:58 2025 by rpki-client