Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: G92ko4XwKAe89zRYbEaGIUoNYreXpZ3nyerF5u3pLfM=
Subject key identifier: 3B:63:E2:4C:D3:4A:83:4C:63:8E:11:FD:FA:A7:3D:C2:06:0B:49:D0
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019849D3949E6B1FCA1A9421BB36C81EBA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0F17
Signing time: Sun 27 Jul 2025 03:00:59 +0000
Manifest this update: Sun 27 Jul 2025 03:00:59 +0000
Manifest next update: Mon 28 Jul 2025 03:00:59 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: BDhMVJEOk/DWzUiL/no1qqW6zVt1GgtoCpRO/pZ4mco=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:94:9e:6b:1f:ca:1a:94:21:bb:36:c8:1e:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Jul 27 03:00:59 2025 GMT
Not After : Jul 28 03:00:59 2025 GMT
Subject: CN=3b63e24cd34a834c638e11fdfaa73dc2060b49d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:8a:6b:95:8a:0a:08:74:61:cc:63:08:9e:
6c:08:99:a0:62:81:e3:e3:a4:45:ee:05:3b:f0:5a:
d8:57:1d:41:5b:04:c3:74:35:71:cf:89:2c:69:ec:
68:5e:1a:2a:e4:26:f7:82:fe:60:ed:c5:d7:d5:0e:
9f:64:30:68:d9:f0:b9:5d:d7:3c:98:fe:e7:80:fe:
3f:90:f0:d2:b0:11:10:9b:57:62:60:8b:c2:de:bd:
be:c9:49:90:a2:54:c6:16:3f:d0:04:d9:b3:79:4d:
1c:92:a2:62:dd:c8:7b:c0:a2:97:f9:ec:0c:ac:cc:
26:ab:3a:c6:08:68:e7:63:93:fb:c5:8f:79:15:f4:
fe:b0:41:51:f8:69:c0:e8:76:18:d5:15:53:90:2d:
d9:16:30:b2:26:0d:79:64:9f:4e:0d:ce:d2:75:b0:
8d:2b:55:e8:53:50:7a:bf:5d:97:01:8d:cd:a1:dc:
fb:67:03:cf:53:b3:84:c7:30:57:0f:06:2d:81:c0:
f7:9d:72:78:6a:db:b5:eb:50:ba:d1:af:5d:3d:73:
45:45:cd:b4:cb:27:b9:72:9a:46:0b:dd:f2:92:34:
5d:f7:dd:2e:63:33:c8:1d:ac:79:1f:a3:56:4b:e6:
53:01:f1:95:87:19:d4:0f:22:0c:d5:27:02:86:56:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:63:E2:4C:D3:4A:83:4C:63:8E:11:FD:FA:A7:3D:C2:06:0B:49:D0
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:98:b1:58:be:a9:b7:56:dd:9f:98:e6:38:69:11:e7:01:
51:ef:44:bf:ab:e5:6e:0a:06:e4:22:7d:ff:2e:76:c5:fd:57:
ad:90:2d:af:ff:d3:32:05:13:af:1c:4e:73:c7:3c:0b:de:91:
78:12:62:f8:86:b7:8d:eb:12:fc:6a:4e:e2:21:12:8f:15:c7:
5b:25:84:36:8d:ee:85:03:17:2a:30:cd:8e:5c:67:59:19:4d:
18:a0:d9:78:c6:54:62:48:1a:6c:d0:ce:bc:e5:b6:5d:0c:6c:
0a:ab:7c:88:62:3f:ca:69:15:4d:ba:15:b3:41:0e:ff:46:47:
ca:ce:0e:48:ca:28:12:5a:6b:d4:e8:f2:44:29:ff:4b:99:51:
18:2b:c3:1f:a1:2a:c6:ac:0f:bc:03:c2:81:fc:47:83:f9:38:
65:61:5e:cf:c7:0a:66:1b:cc:58:e8:3c:ac:8e:01:0d:62:67:
18:47:68:64:e0:8e:57:9b:5f:b7:15:92:52:8a:4e:d5:88:3e:
71:38:c2:03:e3:3f:eb:6f:f4:2e:6c:75:35:4b:3b:b4:12:4a:
f7:ec:53:0a:0f:d7:9c:df:f7:31:55:14:d0:70:12:c2:ac:d0:
e0:3d:33:c7:88:79:6b:86:10:3e:5f:4e:56:3d:49:4b:80:bc:
69:e4:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:32 2025 by rpki-client