Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: WD597ip9jROm9KkzgEJG2WMiZIhFmjKn+n0xGwUOwyA=
Subject key identifier: E3:CA:A0:C4:82:C5:1A:5D:69:06:20:D7:C0:9D:13:3C:52:B6:F5:E9
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 01984A0A74E40D7F3F27FBE0C7977E6D93E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 11B5
Signing time: Sun 27 Jul 2025 04:00:55 +0000
Manifest this update: Sun 27 Jul 2025 04:00:55 +0000
Manifest next update: Mon 28 Jul 2025 04:00:55 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: CSKlRJ75pOvWJZsJZYEcdaI8jD5bc/GyW2mH17lItsU=)
2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:74:e4:0d:7f:3f:27:fb:e0:c7:97:7e:6d:93:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Jul 27 04:00:55 2025 GMT
Not After : Jul 28 04:00:55 2025 GMT
Subject: CN=e3caa0c482c51a5d690620d7c09d133c52b6f5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:75:12:4d:c7:2b:28:38:b8:57:4a:c6:4b:
70:b1:aa:b2:75:f8:f2:b7:8b:10:2b:03:ac:ff:a1:
61:d4:7a:cc:46:0f:ac:02:d8:6c:49:30:82:3c:c1:
77:36:4e:d3:27:87:06:42:7e:e9:ee:38:5e:7a:1f:
18:a0:24:f4:3f:67:d6:1f:9b:39:d6:98:1a:f3:27:
a5:35:b5:58:f0:bd:42:31:a9:2e:b3:b6:82:ec:55:
80:28:ad:be:f0:58:33:78:92:0f:f8:89:51:72:b9:
dc:2f:ee:b5:ab:ee:d6:9b:b5:06:76:4d:9e:93:31:
ad:1c:21:86:50:9e:dd:ac:f4:dd:c3:f1:0f:fe:59:
0d:be:b4:05:88:fd:3b:0d:65:d6:a1:29:88:42:25:
21:c6:ac:8a:c7:94:e9:89:0c:2f:74:a7:27:e0:77:
78:41:c8:d3:f2:50:df:ea:75:41:d2:88:36:af:94:
aa:27:2a:16:0f:6b:a0:46:48:79:0a:75:a8:f7:a0:
3f:d5:2e:bd:05:56:9f:9a:18:f8:75:03:94:5b:c3:
bc:0a:40:4b:cc:6c:34:82:84:f9:3f:0a:3d:b2:ed:
ea:62:ac:71:70:c0:5a:81:3e:c2:a2:2e:05:66:5f:
4b:fd:29:f5:30:6f:c4:95:8c:21:9b:0a:f9:f8:09:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:A0:C4:82:C5:1A:5D:69:06:20:D7:C0:9D:13:3C:52:B6:F5:E9
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:68:bd:bd:b9:eb:31:ea:91:a9:39:0e:a1:a7:51:b5:75:
1b:ee:ef:56:15:1d:4d:3f:ce:3c:71:76:b2:05:80:cf:2d:a9:
8b:2c:f8:d9:36:fb:76:63:06:1f:f5:77:f8:4e:53:cc:aa:88:
f9:cf:b5:fd:a2:c5:ff:5f:cd:64:ed:f2:5a:ca:a9:87:eb:73:
7d:76:ab:a7:67:2f:07:1d:c2:7f:76:ca:2c:2f:ae:49:e4:d5:
47:f7:e3:48:fe:f5:c2:67:7d:94:e5:7e:01:f5:ba:9d:a3:7c:
aa:82:46:94:8c:04:82:ab:52:bc:8e:ce:20:24:77:0d:b1:0c:
4d:fe:24:26:af:f6:af:82:f3:fa:dd:05:7b:13:9b:73:27:8a:
83:d3:bf:25:43:b0:3a:df:1e:34:d9:cc:21:6a:63:d7:d0:2d:
05:c8:82:4a:64:ce:54:d5:0b:ed:b4:41:38:d0:9c:1a:95:3b:
18:b8:ab:b8:a4:10:dc:03:7a:91:03:9c:6e:fd:fd:e1:69:0d:
ec:e6:e0:ea:d4:68:93:7c:06:00:29:1d:d4:f2:e8:60:ff:39:
cc:be:fc:27:0d:13:ed:4a:2d:10:8a:62:3a:8f:f9:ad:3f:34:
ce:fb:93:6b:96:54:11:09:4d:7c:34:87:b0:99:52:72:ad:a6:
e5:1b:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:15:40 2025 by rpki-client