Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: 32Iag16PqbYhcdyUN0db3TwWVUO/s9PDff1xP6Q9K7c=
Subject key identifier: 1F:19:86:35:A3:64:0B:E9:CF:2B:A6:CB:35:2E:5D:4F:8D:91:B6:76
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 01984B53C78DA7BC6386DA9F16323A4D3EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 067A
Signing time: Sun 27 Jul 2025 10:00:38 +0000
Manifest this update: Sun 27 Jul 2025 10:00:38 +0000
Manifest next update: Mon 28 Jul 2025 10:00:38 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: 1TntKdR9kRQ6IE3jl8HBvtlhioew68mdShfWg+Lq1RU=)
2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:c7:8d:a7:bc:63:86:da:9f:16:32:3a:4d:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Jul 27 10:00:38 2025 GMT
Not After : Jul 28 10:00:38 2025 GMT
Subject: CN=1f198635a3640be9cf2ba6cb352e5d4f8d91b676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:d7:11:4b:71:31:05:d6:cb:06:37:1e:51:
42:eb:b8:de:24:b7:99:a6:d6:e4:a0:8f:00:dc:85:
79:5d:0b:d5:fd:1e:77:50:34:6e:aa:4b:2c:1e:de:
01:47:b8:0b:d4:ff:2b:d0:97:88:78:41:88:d9:1f:
cc:4c:99:d3:b9:9c:2c:f9:ce:2f:38:02:a1:e9:15:
6f:1c:65:93:b8:2c:55:4c:c6:c3:77:f7:67:46:01:
0a:d3:37:ff:eb:5d:cf:87:70:5d:f0:92:f9:8f:d6:
8e:22:e5:60:8b:3c:0c:09:30:fe:db:af:89:a5:21:
58:01:ce:5d:9d:48:5c:f0:7e:9b:9d:f0:26:e7:a3:
08:89:59:49:69:e4:1d:87:4f:00:41:c8:0f:82:2c:
ef:9f:13:40:4a:5f:18:a8:f8:c8:82:b5:91:b9:4e:
14:27:18:16:ad:0c:b0:c5:ef:53:25:3c:9c:cb:b1:
75:ca:fe:1a:87:3f:44:9c:6c:b1:5e:91:14:62:0b:
27:1e:da:a2:3d:28:7e:ba:19:d7:53:82:e3:1b:5c:
db:54:58:db:8e:e6:55:17:ed:cd:32:ec:2d:ad:78:
92:26:d1:3f:cf:53:69:a6:85:72:f0:1a:f4:60:ca:
65:2d:d7:46:d6:e3:99:c0:4f:5d:8b:47:62:77:4e:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:19:86:35:A3:64:0B:E9:CF:2B:A6:CB:35:2E:5D:4F:8D:91:B6:76
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:14:c8:48:91:32:2a:bc:4b:ef:00:a8:29:0a:56:3f:55:3f:
0a:8a:b1:e2:08:66:ad:85:c1:5f:5d:5f:cd:80:9d:1d:93:a8:
0a:82:b8:1c:35:e2:6c:08:fc:06:c2:93:51:08:08:d6:2e:e9:
09:08:b5:57:e9:5b:49:5f:2f:f7:b9:17:dd:40:65:2f:79:9d:
ac:fe:6d:4b:eb:09:3b:d2:e6:23:cd:d5:e9:ae:d9:cd:c3:0e:
41:ff:9d:4b:9d:49:22:e1:15:d9:4f:1c:a3:53:85:95:db:9f:
14:dc:90:6a:58:3f:32:85:18:e1:49:b0:52:26:b5:bc:38:93:
7b:ac:e4:8f:09:a9:47:80:bf:2e:d0:0c:30:10:64:9b:4b:1d:
52:a5:28:a0:26:14:f1:19:19:e7:81:15:2a:56:ff:c5:8b:b3:
cc:73:6b:2e:59:43:5a:d5:79:e3:25:e7:cf:31:cd:38:18:ae:
b8:5d:78:60:74:0b:8e:46:cc:62:45:9f:25:84:c8:fb:29:af:
2d:d2:ca:1c:29:c9:52:69:a1:23:a3:60:c0:cd:b7:4e:75:b7:
35:f0:46:45:da:bd:31:3d:f8:9c:01:9e:eb:f1:0b:da:35:06:
30:f9:72:63:e9:ea:9e:5d:f8:d7:a7:f6:7a:2f:c0:6e:82:d1:
6a:26:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:40:25 2025 by rpki-client