Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: 7yGhcRQMrt7QuzAiN3g3woWRtHT8RPht474A4F2QLFQ=
Subject key identifier: D9:34:1F:E9:49:9E:24:79:B7:45:8A:40:5A:69:51:F9:F5:16:D5:EE
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 0199180A628718A768C9E85320416C9EB8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 166F
Signing time: Fri 05 Sep 2025 04:02:37 +0000
Manifest this update: Fri 05 Sep 2025 04:02:37 +0000
Manifest next update: Sat 06 Sep 2025 04:02:37 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: nvhnfhAZxrF/E6ZBwsolsrPoR1jF7nV6YhsTVPvS5ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:62:87:18:a7:68:c9:e8:53:20:41:6c:9e:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Sep 5 04:02:37 2025 GMT
Not After : Sep 6 04:02:37 2025 GMT
Subject: CN=d9341fe9499e2479b7458a405a6951f9f516d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:3d:f9:3f:53:07:c0:ad:56:9a:de:c6:50:
f0:13:bb:05:22:51:d2:3b:80:61:da:5e:a9:44:79:
89:02:9a:32:df:b9:8a:7f:2b:7e:ae:b2:49:35:81:
a0:92:e1:aa:13:91:85:3f:d2:eb:c0:7a:7a:d7:34:
a8:40:45:47:36:b7:22:08:3a:ca:2a:c9:ef:64:cd:
80:91:81:72:0b:fc:48:2d:85:ef:dc:2c:3d:0f:43:
05:30:c8:b8:31:5c:3c:99:65:f1:eb:10:6d:a0:37:
36:ac:de:e4:48:0c:f7:86:63:00:f1:d7:ca:ac:f2:
1e:45:9c:ab:43:52:dd:b4:b3:13:4c:9d:5f:c8:88:
24:b9:5c:93:95:54:f9:e4:1e:4f:ca:0b:6a:3d:f2:
b2:bf:e1:53:b2:62:a9:19:3b:4b:17:2c:f9:cc:a9:
2f:cf:07:15:92:d5:5f:1c:d2:ba:9d:83:85:36:f0:
50:66:d1:34:e7:05:b1:56:1b:64:80:6c:26:d8:fc:
53:f2:48:06:c8:b8:35:11:21:cd:5d:b4:bd:e2:22:
22:9b:07:64:9a:81:c3:ed:a5:23:82:a8:83:3b:17:
48:b3:bd:87:86:f9:1a:b5:9d:a3:cd:1e:d3:85:30:
10:1a:0e:da:ed:a3:09:e0:0f:ea:d3:e8:8d:4a:db:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:1F:E9:49:9E:24:79:B7:45:8A:40:5A:69:51:F9:F5:16:D5:EE
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e5:67:ea:8b:13:1a:05:fd:1b:51:ec:a4:0b:f7:ab:c0:e5:
c4:ec:2d:42:e2:24:91:31:ee:70:5a:59:70:53:42:d4:05:db:
54:a4:43:90:81:0d:93:28:be:89:8f:45:a1:48:ca:b9:ca:03:
33:2e:52:f8:c9:db:34:4d:29:d0:a3:62:11:3c:f7:32:c9:d6:
25:28:6a:05:42:d0:4b:10:90:1f:8e:36:f8:87:01:38:30:5d:
79:0e:e8:95:39:7a:a5:68:72:e4:7f:32:09:5c:36:46:8f:ae:
5b:4c:bb:1b:d0:7b:df:60:f3:c4:eb:44:91:f0:74:3c:68:ac:
f1:7b:73:6f:b6:86:b7:8b:b9:83:56:30:ef:03:76:fc:33:36:
f9:7b:7d:79:bf:32:b8:3d:13:48:54:b4:bc:0c:1b:10:a1:ef:
4f:b5:e5:7a:d3:77:5a:5f:83:dc:70:fd:c5:31:25:c1:53:57:
a2:30:1e:81:d3:05:70:f7:48:96:e1:95:ef:2d:80:3f:18:95:
29:eb:43:3f:fb:b6:e5:10:f5:b2:f7:ed:b8:ae:55:50:b5:7d:
62:03:d2:b8:ef:83:5a:f6:f5:ea:67:e0:12:65:86:ca:8b:24:
df:f1:93:49:db:0f:c1:96:c0:31:4e:93:35:1d:0e:a2:ed:2e:
07:61:57:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:46 2025 by rpki-client