Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
File: 3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json)
Hash identifier: QXEe0elhlzNp97WCEFIccnjsWLLrCRqdqX4HNsaCjCQ=
Subject key identifier: 6F:B6:8F:B2:10:60:1E:81:27:BA:C7:2A:81:52:A8:8B:28:E0:F0:9E
Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
Certificate issuer: /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Certificate serial: 0198481B89C26A11F99CBE8BCC9A9AC3D542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
Manifest number: 04E6
Signing time: Sat 26 Jul 2025 19:00:20 +0000
Manifest this update: Sat 26 Jul 2025 19:00:20 +0000
Manifest next update: Sun 27 Jul 2025 19:00:20 +0000
Files and hashes: 1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: KcKE5SIaaEYMH7ukBxzroE88/OzLTtoDp+xF3AYpvXc=)
2: dA9DZPAABtlejc0G0adjQxYBv5c.roa (hash: 3UVeFl3N3ODI+QVLphkmL5y9dyL4Gw+YagDr/4SW4gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:89:c2:6a:11:f9:9c:be:8b:cc:9a:9a:c3:d5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Validity
Not Before: Jul 26 19:00:20 2025 GMT
Not After : Jul 27 19:00:20 2025 GMT
Subject: CN=6fb68fb210601e8127bac72a8152a88b28e0f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:e6:0c:4f:28:8d:c3:fe:ab:41:ad:41:e4:
8e:f8:11:69:c9:85:94:ee:9c:a4:ec:cd:24:1f:a1:
6c:58:e5:13:7a:87:bc:5d:96:72:29:52:28:7f:31:
d6:01:b4:95:42:0d:b8:be:60:40:ce:5f:d3:7f:37:
de:9c:e6:0e:f8:96:5c:db:45:aa:2e:c4:bd:35:fc:
69:cb:de:20:f7:c5:4b:16:90:f5:50:5e:d6:95:70:
85:04:1c:c2:13:10:8f:4d:fb:aa:98:e8:fe:fe:d8:
55:c2:a5:8d:dc:78:1a:66:ea:69:1f:6a:a5:eb:dd:
63:b4:d2:97:fa:e5:b5:fd:33:cd:ff:27:f4:ba:da:
f3:a9:7c:2c:02:63:bd:63:e7:58:e3:44:c1:d8:fe:
a7:aa:bd:f2:63:c5:50:8d:1f:73:47:81:a0:4a:93:
a0:18:c6:31:f7:b3:94:d3:a8:a3:15:08:cb:d1:25:
52:3a:67:8c:27:b4:3b:9d:27:4f:54:6c:72:97:18:
ae:2e:39:26:84:c1:b0:23:f4:05:70:bf:3e:5b:e8:
16:fc:78:a7:cc:39:61:b7:bb:3a:32:3c:e9:cf:b6:
5d:0f:46:d1:54:14:fe:da:87:31:ef:ca:22:4b:a2:
a8:98:ea:99:75:3b:a8:a8:16:26:22:c1:33:48:6c:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:8F:B2:10:60:1E:81:27:BA:C7:2A:81:52:A8:8B:28:E0:F0:9E
X509v3 Authority Key Identifier:
keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:12:fc:a5:ad:bb:19:6c:49:a4:d4:7f:4d:b0:64:93:60:99:
86:af:2e:75:fc:c5:5d:8b:02:be:45:8c:68:39:88:e8:4d:41:
44:31:db:aa:3c:68:e2:3d:7d:08:e7:58:51:9c:03:7e:4d:11:
a8:fb:73:8c:53:d1:63:0e:5d:94:f5:db:af:4a:f4:e1:ca:ba:
b4:46:33:a9:ae:39:4e:04:b9:c2:5c:32:d5:39:1c:8d:bf:7e:
83:81:39:9f:41:bd:9d:db:81:56:e6:ed:7f:47:85:3a:f8:0e:
c1:2f:9b:44:8f:c6:ad:2d:1c:f2:74:8c:f3:20:63:45:79:ba:
c4:32:77:6a:c8:ad:89:10:2f:73:65:78:2b:83:d0:20:d9:29:
31:91:56:53:4d:db:b6:d2:d6:59:fd:d1:50:99:10:a6:c9:de:
fb:43:c3:d2:5f:16:17:79:d2:af:e2:94:fc:e6:6d:9e:44:08:
d4:b4:44:40:50:c8:b6:60:3c:34:2f:92:5d:d5:a2:08:52:6f:
5b:55:8b:f2:f3:98:d3:94:c6:fe:d4:6c:61:f7:2f:66:b9:9a:
ef:1c:c5:4b:76:47:07:09:42:df:6b:e5:fc:c6:47:e2:4d:7a:
f1:6b:d2:76:05:19:48:8b:11:0d:53:32:c4:44:06:e4:c6:1f:
b0:11:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:31 2025 by rpki-client