Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
File: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft (raw, json)
Hash identifier: OJJdBro/NYQOsC2wt/3JPpVqR7NpVZe9UcUxYeCh7+w=
Subject key identifier: 62:FA:E0:2A:88:9E:A4:DA:C7:6E:72:4F:F3:BC:B8:2F:C7:8F:76:BE
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial: 01984708B9BDADF11D4C2A3BF71D207F4E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
Manifest number: 0A11
Signing time: Sat 26 Jul 2025 14:00:10 +0000
Manifest this update: Sat 26 Jul 2025 14:00:10 +0000
Manifest next update: Sun 27 Jul 2025 14:00:10 +0000
Files and hashes: 1: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl (hash: NX1YK7+oYTGvXbVDVWYnZXn8+Q7AI3IvIyQ28JnyiRQ=)
2: jU0yi7PHweJFHYaEaX0jg-4Q_RU.roa (hash: 8PA9xbvSb0ZvYzYhTOCmIzBIyrP4FgGrFueLXskDR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:b9:bd:ad:f1:1d:4c:2a:3b:f7:1d:20:7f:4e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
Validity
Not Before: Jul 26 14:00:10 2025 GMT
Not After : Jul 27 14:00:10 2025 GMT
Subject: CN=62fae02a889ea4dac76e724ff3bcb82fc78f76be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:d1:cd:03:bf:05:16:89:37:c4:40:5d:38:
aa:14:65:1a:19:93:c1:4b:a0:64:a4:c9:dd:5e:35:
79:4b:66:63:e3:46:b5:cc:39:34:f4:25:3a:b4:11:
ec:7f:0c:67:59:9a:f2:7d:4f:88:78:62:7e:44:95:
60:9c:02:d0:5b:bb:a9:c2:03:90:55:92:0e:f1:ea:
58:04:c6:b1:ea:db:c2:99:ac:15:3e:ba:f0:66:18:
56:3c:7c:81:54:35:cd:71:ef:5c:79:ee:ef:75:f6:
e9:2b:47:45:89:53:df:c0:a4:f8:7f:aa:3a:42:7f:
c4:a5:ce:f4:67:b9:69:a9:ad:c1:91:b7:14:f7:bb:
69:de:32:96:b8:a6:70:df:07:1a:34:e8:5e:04:65:
77:03:27:1f:90:42:5e:6b:d6:73:f0:3d:97:72:c2:
61:d5:6a:db:0f:df:8f:83:e7:1c:ad:e1:26:a5:c0:
1e:20:3f:e8:cd:f4:04:fb:82:65:05:26:b0:14:80:
29:25:3e:df:6b:63:a2:db:da:fa:1a:42:35:0e:40:
76:b0:d7:c1:51:e3:b0:1c:3e:06:74:0d:de:b1:47:
8c:0a:6c:bc:5b:34:fe:a5:04:fa:d2:f9:2a:51:98:
70:ab:7f:2f:32:d1:64:ef:20:91:d4:08:74:05:89:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:E0:2A:88:9E:A4:DA:C7:6E:72:4F:F3:BC:B8:2F:C7:8F:76:BE
X509v3 Authority Key Identifier:
keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:58:43:cb:a4:29:3a:7b:3b:ba:04:9f:51:f2:48:d3:ed:d8:
93:5c:a1:50:51:b7:ce:0f:2c:0a:70:f4:f1:74:d9:94:dc:da:
1e:89:ba:ff:6b:98:0c:ae:22:e1:a5:01:1f:c8:7e:ae:d6:7d:
52:60:35:0b:19:0f:7c:16:8b:e7:02:0e:1a:33:95:52:73:6d:
0b:d8:9f:cf:29:ed:e3:52:d7:d3:fa:2f:57:b7:c4:17:90:2b:
db:16:48:15:1d:7b:fa:24:17:7f:1b:ff:36:b0:63:e9:15:e1:
8e:dc:8f:e3:15:bf:05:15:eb:f1:95:14:21:ca:08:0a:07:93:
bc:c4:12:03:70:a0:af:dc:f9:78:3d:3f:e7:41:0c:e7:2f:6d:
ea:af:a7:0f:f5:46:2c:99:d4:7d:dc:04:bc:34:aa:d2:e2:cb:
35:2f:69:a5:8d:7c:d4:ed:ab:fe:83:f9:8b:c9:e3:da:d2:41:
fb:9d:28:f1:36:e7:8a:f0:64:31:5c:d8:f5:89:ef:65:33:88:
ec:94:fd:84:34:3c:44:b5:07:1b:0c:28:ef:f4:99:bc:6f:76:
4c:0f:78:ea:f7:dc:9f:11:ba:a7:48:53:14:ae:6c:04:5d:e5:
3e:4a:32:66:34:73:37:d0:98:e0:67:fa:97:04:72:bf:cb:50:
4a:d6:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:40:28 2025 by rpki-client