Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: Ff4ecsyByYNE3SpU7vcHVYxgpWnUkyTNhTp6EbsfQ14=
Subject key identifier: 10:60:6E:2E:3B:13:3B:36:32:62:36:39:2C:D5:E4:E3:D5:85:65:85
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019845F6E2FA4B6737EA9EECD9D10D339CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 1002
Signing time: Sat 26 Jul 2025 09:01:04 +0000
Manifest this update: Sat 26 Jul 2025 09:01:04 +0000
Manifest next update: Sun 27 Jul 2025 09:01:04 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: yin5lQg0eH0CvlGOFi3bjoBnOu42jAHtNmhJaQSd+ds=)
2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:e2:fa:4b:67:37:ea:9e:ec:d9:d1:0d:33:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jul 26 09:01:04 2025 GMT
Not After : Jul 27 09:01:04 2025 GMT
Subject: CN=10606e2e3b133b36326236392cd5e4e3d5856585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:8b:f8:b1:53:1e:f0:87:e5:74:f0:85:1b:
2e:ee:f1:54:63:97:59:7a:86:bb:52:b9:43:6e:d0:
1f:3d:5b:82:f7:90:86:0b:0b:13:93:f3:9e:4b:df:
a3:08:3e:06:3c:80:f5:9e:08:ab:14:ed:46:0c:00:
32:2c:d3:4b:d7:4e:76:59:65:30:da:57:77:44:b7:
97:d9:62:68:24:0b:2d:16:a0:2d:ff:37:a3:0b:54:
58:f4:36:25:56:38:7a:0f:fb:74:c9:71:18:d5:26:
e7:9f:79:6a:5d:fe:ec:9d:11:6b:88:93:8b:91:a7:
f3:c7:bf:3a:57:78:ab:2a:4f:3f:9f:11:74:4f:82:
13:63:4d:db:10:40:e5:0d:a8:05:ce:8b:48:59:34:
d6:02:ff:f2:94:3f:9a:8a:f1:50:a8:b4:68:e3:80:
96:ee:74:f7:51:1a:48:f3:7a:8a:3e:9e:ed:e6:64:
33:07:cb:47:c4:17:13:6a:43:81:84:61:64:d1:24:
c1:e7:bc:36:2f:4a:c7:e3:2d:7a:b0:86:b1:d6:a4:
e3:26:1b:4a:d8:5d:3d:59:1e:cd:7a:45:9c:74:74:
bc:8a:04:b1:a9:c4:20:82:f9:14:1d:99:12:e0:93:
56:63:94:91:92:99:b1:00:3e:40:f2:3d:e3:e3:eb:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:6E:2E:3B:13:3B:36:32:62:36:39:2C:D5:E4:E3:D5:85:65:85
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4f:73:0b:29:9d:2e:3f:e4:93:91:98:7c:81:73:17:c3:b1:
21:aa:6a:ea:c7:91:ac:85:44:8c:54:01:67:06:ad:62:7d:14:
26:22:de:53:d0:2f:40:80:a9:f6:d7:92:d5:6e:cb:36:c5:c5:
7a:64:f7:f7:8e:fe:53:b8:14:cc:fd:00:12:c4:27:8d:c0:3b:
fa:74:2b:72:21:ba:d9:4f:a2:98:0a:57:3b:81:e0:2f:a5:f4:
ee:74:3e:00:bb:a8:d5:81:2d:f2:af:33:9d:0c:d6:7c:4f:c3:
e0:12:e4:26:bd:8f:3a:25:81:12:af:cf:75:9c:6f:a4:36:8e:
f0:b3:25:c9:61:51:7c:a1:17:49:10:12:a1:c2:02:fa:eb:b0:
6f:f6:e2:5b:76:01:6d:22:ec:75:a6:2d:04:d8:51:59:2e:49:
c6:b1:82:54:80:18:8c:bf:7e:1b:b5:1c:e4:39:ce:cb:22:6e:
99:86:e9:1f:00:85:fc:0a:e4:10:a6:64:41:ca:33:42:63:3c:
f5:02:78:df:d2:ff:1b:56:ca:6f:64:58:2d:58:aa:71:e7:32:
e2:04:a6:73:91:c9:d8:76:ba:27:81:73:ac:41:05:bb:25:c4:
c1:38:8b:c4:ad:0e:13:42:51:a0:f2:87:d4:3b:4b:03:44:25:
06:b4:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:28:35 2025 by rpki-client