Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: ATosSw8agU8g4D5tD0mqwzGjnIZ0KpRlF5bMWE6Plj8=
Subject key identifier: 1E:05:7E:F2:0B:46:1A:D1:23:12:16:2A:EF:79:1E:2E:01:1A:1D:0B
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 01984966B5B36F51D1CF1042F62034F7A4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0D3B
Signing time: Sun 27 Jul 2025 01:02:04 +0000
Manifest this update: Sun 27 Jul 2025 01:02:04 +0000
Manifest next update: Mon 28 Jul 2025 01:02:04 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: Lq851DBdnFJg0qGUok97O7a9uttgBNb+//rdDcqShTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:b5:b3:6f:51:d1:cf:10:42:f6:20:34:f7:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Jul 27 01:02:04 2025 GMT
Not After : Jul 28 01:02:04 2025 GMT
Subject: CN=1e057ef20b461ad12312162aef791e2e011a1d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:0f:0e:f5:01:3c:e3:8e:4b:6c:ae:d2:9f:
22:be:a0:20:50:c7:0b:ca:e6:74:cc:af:0f:9f:62:
49:ce:d2:e4:95:22:c6:ff:a0:b8:0b:1d:31:59:f2:
f2:98:e0:c1:48:43:d4:7f:8f:bf:02:01:c5:30:91:
65:d1:1f:00:ed:ed:9a:93:ab:17:0d:55:ed:66:ae:
f1:c2:98:e8:d9:97:57:f6:da:42:23:1b:ae:eb:b7:
fd:22:a2:53:12:10:4f:2c:3c:27:45:76:db:16:ac:
cf:c0:8f:48:0f:59:e9:80:d4:44:b7:20:52:23:67:
c7:48:ca:c0:02:1c:f7:17:49:99:92:03:8c:21:95:
a5:b0:53:d2:31:77:8f:16:ac:5d:84:a4:8b:e0:2e:
2f:ab:73:df:ae:be:3f:0f:c2:b2:26:7b:2c:d7:5f:
2b:cc:c7:c7:61:32:f1:79:4b:04:eb:fb:a5:bc:1e:
bd:33:ff:1f:75:fc:8e:f4:86:c4:a5:96:bd:1f:09:
c4:bf:a8:9a:ee:df:3c:49:a7:b1:fd:9a:68:5c:3f:
22:3b:46:24:2e:1c:a9:45:a7:4b:6d:07:5c:f3:0f:
2a:b3:52:96:2d:e3:45:ce:cd:b5:52:8c:9a:44:94:
c0:6c:af:46:86:2a:b9:83:5f:f1:06:93:e3:af:b6:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:7E:F2:0B:46:1A:D1:23:12:16:2A:EF:79:1E:2E:01:1A:1D:0B
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:03:6f:0c:28:07:1c:7d:fc:0d:ef:0c:3c:f1:1f:07:9b:46:
da:b3:43:bb:1f:1f:80:96:a8:45:97:7c:e4:e9:40:b3:9a:51:
19:7e:0d:06:d9:35:57:e8:76:9a:5e:75:a5:1d:cb:13:9a:7e:
28:e3:98:8f:9a:f9:4f:57:fa:82:b0:3f:4a:e0:ad:4e:e7:10:
54:ad:31:cb:56:6b:ee:40:88:60:1f:a7:04:2b:b9:fd:4b:67:
ef:3e:59:6a:e5:00:d1:77:f6:8b:76:99:09:43:6c:09:ff:a7:
9e:33:e6:0d:d3:e1:89:04:9c:c8:a3:0c:94:e5:23:c8:32:8a:
8e:3e:30:f6:52:cf:8f:fb:cb:6d:29:fa:93:05:d1:77:4f:0e:
39:14:dd:94:c6:27:59:6c:7c:2e:43:cf:6f:3d:58:4c:9e:7d:
d3:9b:07:69:e8:71:64:4b:db:80:21:6e:30:43:5f:3a:52:6a:
c7:23:55:60:77:63:4f:b5:2d:02:81:93:7e:db:61:49:53:79:
01:5e:77:f4:18:8b:77:e9:f5:3c:b8:b2:55:8d:58:68:71:b8:
60:ab:7f:aa:63:89:5e:62:e8:f1:03:a4:c5:84:97:98:6d:84:
05:74:48:71:2b:18:ae:c3:62:1b:94:74:8c:bb:8a:54:2e:8b:
c3:5b:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:34 2025 by rpki-client