Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: AThUPb7Umm883d7os40UqPtEG9O1EeORsy6KUIync2w=
Subject key identifier: 78:F3:FC:76:8C:9A:8A:28:E5:C1:A1:84:2D:3F:F2:EE:A9:50:5F:94
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 0198364C923EF876FD30FF23B9182943672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 019A
Signing time: Wed 23 Jul 2025 08:00:44 +0000
Manifest this update: Wed 23 Jul 2025 08:00:44 +0000
Manifest next update: Thu 24 Jul 2025 08:00:44 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: LCtlzHKzDNTRejnwmMIWfDFUJPf3bGLF3G9H5Uktt1A=)
2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=)
3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:4c:92:3e:f8:76:fd:30:ff:23:b9:18:29:43:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Jul 23 08:00:44 2025 GMT
Not After : Jul 24 08:00:44 2025 GMT
Subject: CN=78f3fc768c9a8a28e5c1a1842d3ff2eea9505f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:44:4c:90:44:e5:c0:4d:88:46:38:58:55:
53:ba:6a:65:99:14:c8:3c:67:6c:81:05:10:9a:8a:
46:2b:61:9d:2a:42:7f:5a:de:4e:1f:e2:29:c5:ca:
ad:b4:5f:42:b5:02:35:4d:8b:64:58:4a:76:38:27:
ca:51:5d:4f:da:7b:7d:fd:5d:99:05:4d:ef:7a:0d:
8e:bc:fb:83:1b:9b:13:37:b2:72:57:f7:ee:c4:45:
9a:b4:5d:2f:63:fc:58:fe:41:4b:bf:2c:83:f8:4a:
eb:a1:f6:c8:9b:99:e7:22:0c:ee:62:0c:d4:06:fd:
11:6c:6a:c3:13:79:4a:41:a6:14:e6:b0:91:db:b1:
95:47:1b:ab:75:a3:f0:9b:c7:d3:1d:de:70:34:4d:
ef:f0:c2:84:1e:e0:42:61:ab:16:f2:40:7f:60:35:
79:f1:c7:5b:b9:88:d6:a3:cc:e9:bd:ea:9b:64:c0:
1d:db:5f:e9:71:dc:ae:25:61:16:52:2b:e0:1d:b7:
1e:e0:68:71:4b:f0:d1:ec:a2:f3:ee:f0:65:c2:37:
35:c7:00:f8:f5:b7:d7:e7:57:4e:4f:de:61:34:83:
0a:fd:3f:5d:2f:65:be:44:00:ff:b3:a7:39:53:97:
5e:eb:7b:cb:f7:e2:21:77:78:23:98:fa:17:b7:cb:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F3:FC:76:8C:9A:8A:28:E5:C1:A1:84:2D:3F:F2:EE:A9:50:5F:94
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:c9:d1:a7:03:d4:ca:24:e8:13:e2:e9:68:84:be:70:3c:
f6:87:6f:fe:5c:d6:2f:56:10:71:35:d8:34:df:79:c5:e9:73:
2c:35:e8:00:ff:f4:0d:e6:c3:0d:2c:e2:74:a4:0e:35:9b:c1:
de:f3:5a:f4:12:f4:40:f1:ff:f7:69:24:c4:8c:79:4c:5f:0f:
b4:c4:e8:39:6c:70:04:a6:d4:de:57:a4:71:25:28:3e:a2:c1:
c4:c5:9a:6f:8c:6f:9a:4a:63:f0:4a:c2:ff:ed:94:42:ba:d6:
e4:5a:2f:ce:fc:d9:70:96:45:7c:55:86:42:5e:3d:15:b8:66:
f9:56:c0:03:8b:83:04:54:8e:8a:66:1b:c8:08:0e:0f:16:58:
2e:53:cb:ef:5a:ae:8c:2d:76:51:fc:c1:7d:4c:10:78:d4:23:
71:3f:c2:e7:66:e5:5e:bb:ee:e1:fb:f1:ac:c3:49:72:12:85:
ce:58:04:48:0f:a9:51:c2:20:03:c6:0b:59:bb:46:2d:56:5e:
28:58:28:07:83:36:10:bd:54:1a:5f:ec:f4:d5:53:d3:99:7a:
61:83:d9:c7:6f:f8:94:b0:ac:c9:bb:0a:2f:ad:7b:96:64:8d:
9f:b6:62:9e:12:84:1e:88:b0:31:fb:25:34:cd:83:b6:cb:00:
46:71:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:46:51 2025 by rpki-client